Back to skill
Skillv1.0.10

VirusTotal security

local-search-pro · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

ReviewApr 30, 2026, 6:15 AM
Hash
9cdbfba12a8c7dbb9219ea0b6eb33646bfad307ca0ecc982b5b7af356bb63919
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: local-search-pro Version: 1.0.10 The skill automates the deployment of a persistent SearXNG service via Docker, using the `--restart unless-stopped` flag in `scripts/install.py` to ensure the container persists across system reboots. While this behavior is documented in `SKILL.md` and aligned with the stated goal of providing a local search API, the creation of a persistent system-level service and the use of `subprocess.run(shell=True)` are high-risk behaviors. The skill correctly binds the service to `127.0.0.1` and uses the official `searxng/searxng` image, with no evidence of data exfiltration or intentional malice detected.
External report
View on VirusTotal