Security audit
OpenClaw DuckDuckGo Plugin
Security checks for vulnerabilities and agentic risk
Overview
The plugin provides DuckDuckGo web search with capabilities and data flows that fit its stated purpose.
Search queries are sent to DuckDuckGo, so avoid including secrets. The linked [OpenClaw documentation](https://docs.openclaw.ai/tools/duckduckgo-search) describes this as an experimental HTML-based integration that may encounter CAPTCHAs or break when page layouts change. SkillSpector was not applicable because the package contains no bundled skills; this verdict follows inspection of the plugin code.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.