Back to skill
Skillv1.0.10
VirusTotal security
local-search-pro · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewApr 30, 2026, 6:15 AM
- Hash
- 9cdbfba12a8c7dbb9219ea0b6eb33646bfad307ca0ecc982b5b7af356bb63919
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: local-search-pro Version: 1.0.10 The skill automates the deployment of a persistent SearXNG service via Docker, using the `--restart unless-stopped` flag in `scripts/install.py` to ensure the container persists across system reboots. While this behavior is documented in `SKILL.md` and aligned with the stated goal of providing a local search API, the creation of a persistent system-level service and the use of `subprocess.run(shell=True)` are high-risk behaviors. The skill correctly binds the service to `127.0.0.1` and uses the official `searxng/searxng` image, with no evidence of data exfiltration or intentional malice detected.
- External report
- View on VirusTotal
