Code PluginExecutes codesource-linked

Web Search Plus Plugin

OpenClaw plugin: multi-provider web search (Serper/Google, Tavily, Querit/Multilingual AI Search, Exa/Neural+Deep, Perplexity, You.com, SearXNG) with intelligent auto-routing

Community code plugin. Review compatibility and verification before install.

web-search-plus-plugin · runtime id web-search-plus-plugin

Install

openclaw plugins install clawhub:web-search-plus-plugin

Latest Release

Version 2.0.4

Download zip

Compatibility

{
  "builtWithOpenClawVersion": "2.0.4",
  "pluginApiRange": ">=2026.3.22"
}

Capabilities

{
  "bundledSkills": [],
  "capabilityTags": [
    "executes-code"
  ],
  "channels": [],
  "commandNames": [],
  "configSchema": true,
  "configUiHints": false,
  "executesCode": true,
  "hooks": [],
  "httpRouteCount": 0,
  "materializesDependencies": false,
  "providers": [],
  "runtimeId": "web-search-plus-plugin",
  "serviceNames": [],
  "setupEntry": false,
  "toolNames": []
}

Security Scan

VirusTotal

Benign

View report →

OpenClaw

Benign

high confidence

✓

Purpose & Capability

The name/description (multi-provider web search) matches the requested environment variables, config schema, and provider adapters implemented in index.ts. All declared provider API keys and the SearXNG URL are appropriate for a search aggregator. No unrelated credentials or binaries are requested.

ℹ

Instruction Scope

SKILL.md and README only instruct installing the plugin and configuring at least one provider key or a SearXNG URL. Runtime behavior in index.ts is consistent with those instructions, but it does read a plugin-local .env file and process.env for keys and writes cache/provider health files into the plugin .cache directory — this is documented but worth noting because responses and some metadata persist on disk.

✓

Install Mechanism

There is no external installer or remote download; the package is a single TypeScript file included in the skill bundle and uses only Node.js builtins. No high-risk install steps (like arbitrary URL downloads or executing subprocesses) are present; the CHANGELOG documents removal of Python/child_process.

ℹ

Credentials

The skill requests multiple provider API keys and a SearXNG URL — this is proportionate to a multi-provider search plugin. The presence of KILOCODE_API_KEY (gateway) is explained as an alternative provider route. The plugin reads process.env, OpenClaw plugin config, and a local .env; only the provider-related env vars are mapped/used. Users should avoid populating unrelated secrets into these fields.

ℹ

Persistence & Privilege

The plugin persists search cache and provider health under its own .cache directory and modifies only its own files. always:false and normal invocation modes are used. The potential privilege/security impact comes from cached search results (which may include snippets) and the documented SEARXNG_ALLOW_PRIVATE flag that disables SSRF protections — both are local to the plugin but important to consider.

Assessment

This plugin appears to do what it says: aggregate and auto-route searches across configured providers. Before installing: - Provide only the API keys for providers you trust (SERPER_API_KEY, TAVILY_API_KEY, EXA_API_KEY, QUERIT_API_KEY, PERPLEXITY_API_KEY, KILOCODE_API_KEY, YOU_API_KEY) via the OpenClaw plugin config UI or a plugin-local .env file. Do not place unrelated secrets in those fields. - Be aware the plugin stores caches and provider health in the plugin's .cache folder (on disk). If you want search results to remain private, ensure the OpenClaw host's filesystem is secured or periodically clear the plugin .cache. - SearXNG: by default the plugin implements SSRF protection. Do NOT set SEARXNG_ALLOW_PRIVATE=true unless you understand and trust the target private network (that option intentionally disables SSRF checks and can enable requests to private IPs). - The plugin sanitizes outputs for common API-key/token patterns, but logs and cached JSON could still contain sensitive snippets; treat plugin-local .env and .cache as sensitive files. If you need higher assurance, review the included index.ts yourself (it is single-file and uses only Node builtins) or run the plugin in a sandboxed/test gateway before enabling it for production agents.

✗

index.ts:11

Environment variable access combined with network send.

index.ts:147

File read combined with network send (possible exfiltration).

Patterns worth reviewing

These patterns may indicate risky behavior. Check the VirusTotal and OpenClaw results above for context-aware analysis before installing.

Verification

{
  "hasProvenance": false,
  "scanStatus": "clean",
  "scope": "artifact-only",
  "sourceCommit": "03419cbd175fe4bd4a7916c0df38545fe424048f",
  "sourceRepo": "robbyczgw-cla/web-search-plus-plugin",
  "sourceTag": "03419cbd175fe4bd4a7916c0df38545fe424048f",
  "summary": "Validated package structure and linked the release to source metadata.",
  "tier": "source-linked"
}

web-search-plus-plugin

Multi-provider web search plugin for OpenClaw.

Install

openclaw plugins install clawhub:web-search-plus-plugin

It registers a web_search_plus tool that can query multiple providers and auto-route to the one that best fits the query.

Why use this instead of OpenClaw's built-in `web_search`?

OpenClaw's built-in web_search uses Brave Search.

You might want this plugin when:

Brave returns thin or no results for a query, but Serper/Google or You.com still finds relevant pages.
You want research-oriented output; Tavily can return structured results that are easier to summarize.
You want semantic discovery; Exa can find related content that plain keyword search may miss.

Supported providers:

Serper (Google)
Tavily
Exa
Querit
Perplexity
You.com
SearXNG

What you need

You do not need every provider.

You need at least one configured provider:

an API key for any hosted provider, or
a SearXNG instance URL

Quick setup

cp .env.template .env
# add at least one API key or SearXNG URL

Then load the plugin in OpenClaw and restart the gateway.

Provider overview

Provider	Best for	Free tier	Rate limit (free)
Serper	Google-style general web, news, shopping, local results	Yes	2,500/mo
Tavily	Research-style results and summaries	Yes	1,000/mo
Exa	Semantic / neural discovery	Yes	1,000/mo
Querit	Multilingual and regional search	Yes	Varies
Perplexity	Answer-style web results with citations	Limited / depends on plan	API credits required
You.com	General web + answer-oriented results	Limited	60 req/hr
SearXNG	Self-hosted metasearch	Yes, self-hosted	Self-hosted, unlimited

Auto-routing logic

The plugin scores each query against the providers you have configured and picks the best match for that query type. If the first choice is unavailable or fails, it falls back to another configured provider instead of failing immediately.

Notes

Auto-routing chooses among configured providers only.
If a provider is missing credentials, it is skipped.
SearXNG includes SSRF protection by default.
SEARXNG_ALLOW_PRIVATE=true disables that protection and should only be used on trusted private networks.

Environment variables

SERPER_API_KEY
TAVILY_API_KEY
EXA_API_KEY
QUERIT_API_KEY
PERPLEXITY_API_KEY
KILOCODE_API_KEY
YOU_API_KEY
SEARXNG_INSTANCE_URL
SEARXNG_ALLOW_PRIVATE

Repository

GitHub: https://github.com/robbyczgw-cla/web-search-plus-plugin

Web Search Plus Plugin

web-search-plus-plugin

Install

Why use this instead of OpenClaw's built-in web_search?

What you need

Quick setup

Provider overview

Auto-routing logic

Notes

Environment variables

Repository

Why use this instead of OpenClaw's built-in `web_search`?