Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

AISearch

AI-powered web search skill for retrieving real-time internet information, news, research data, and fact-checking from multiple online sources.

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 172 · 0 current installs · 0 all-time installs
bynodunjj@prismheart
MIT-0
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The SKILL.md and scripts implement a web-search API client and require an API key (CLOUDSWAYS_AK) and tools (curl, jq), which are coherent with the described purpose. However, the registry metadata claims no required env vars or binaries while SKILL.md's openclaw metadata and the script both require CLOUDSWAYS_AK, curl, and jq — this discrepancy is unexplained and inconsistent.
!
Instruction Scope
Runtime instructions direct the agent to call an external API and to set CLOUDSWAYS_AK; the provided script only sends search queries and parses results (no local file reads beyond the given JSON arg). The concern is inconsistency between documented endpoints and the script: SKILL.md shows API host(s) like aisearchapi.cloudsway.net and homepage aisearch.cloudsway.net, while the script actually calls https://truthapi.cloudsway.net/api/search/smart. Mismatched endpoints increase risk of unintended data disclosure.
Install Mechanism
This is instruction-only with a small included script and no install spec. Nothing is written to disk by an installer; risk from install mechanism is low.
Credentials
Requiring a single API key (CLOUDSWAYS_AK) is proportional for a hosted search API. The note: registry metadata does not declare this requirement while SKILL.md and the script do — the missing declaration is a mismatch that should be clarified before supplying credentials.
Persistence & Privilege
The skill does not request persistent or elevated privileges (always:false, no config paths, no system modifications). It can be invoked by the agent normally; this is expected for a searchable external API skill.
What to consider before installing
Do not provide your real CLOUDSWAYS_AK key or install this skill system-wide until you resolve the inconsistencies. Specifically: (1) ask the publisher which domain is authoritative (aisearchapi.cloudsway.net vs truthapi.cloudsway.net) and whether the homepage/registry entry should list the API host; (2) confirm why registry metadata omits the required env var and binaries; (3) inspect and verify TLS certificate and ownership of the API host (WHOIS, HTTPS cert) and consider testing with a throwaway key; (4) if you must try it, run the script in a network-isolated environment and monitor outbound traffic to confirm it only contacts the expected API. If the publisher cannot explain the endpoint/metadata mismatches, treat the skill as untrusted.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.5
Download zip
latestvk97c429bvtbx2w8asa04ag79jx82jszw

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

AI Search Skill (Web Search for AI Agents)

This skill enables AI agents and LLM systems to perform web search and retrieve real-time information from the internet.

It works similarly to modern search engines such as:

  • Google
  • Bing
  • Perplexity
  • Brave Search
  • Tavily

The skill allows AI systems to access up-to-date information, including:

  • news
  • websites
  • research articles
  • documentation
  • trending topics

When Should This Skill Be Used

Use this skill when the user asks about:

• searching the internet
• latest news or current events
• information from websites
• online research topics
• finding articles or documentation
• verifying facts
• gathering information from multiple sources

Example queries:

  • "latest AI news"
  • "search the web for vector database benchmarks"
  • "find information about GPT models"
  • "what happened in AI this week"
  • "latest updates from OpenAI"
  • "research agentic AI architecture"

Example Use Cases

Web Search

Search the internet for general information.

Example:


search the web for latest AI developments


News Search

Retrieve recent news or trending events.

Example:


latest AI news this week


Research Tasks

AI agents gathering information from multiple sources.

Example:


research agentic AI architecture


Fact Checking

Verify claims using multiple web sources.

Example:


check if GPT-5 has been released


Quick Setup

  1. Get your API Key

Sign up at:

https://aisearch.cloudsway.net

  1. Set environment variable
export CLOUDSWAYS_AK="your-api-key"

That's it. The skill is ready to use.


Quick Start

Method 1: Using the Script

cd ~/scripts/search
./scripts/search.sh '{"q": "your search query"}'

Examples

# Basic search
./scripts/search.sh '{"q": "latest AI developments"}'

# Search with time filter
./scripts/search.sh '{"q": "OpenAI news", "freshness": "Week", "count": 20}'

# Deep research
./scripts/search.sh '{"q": "Agentic AI architecture", "enableContent": true, "mainText": true}'

Method 2: Direct API Call

curl -s -G \
  --url "https://aisearchapi.cloudsway.net/api/search/smart" \
  --header "Authorization: ${CLOUDSWAYS_AK}" \
  --data-urlencode "q=your search query" \
  --data-urlencode "count=20" \
  --data-urlencode "freshness=Week"

Real-world Example

curl -s -G \
  --url "https://aisearchapi.cloudsway.net/api/search/smart" \
  --header "Authorization: ${CLOUDSWAYS_AK}" \
  --data-urlencode "q=latest AI news February 2026" \
  --data-urlencode "count=20" \
  --data-urlencode "freshness=Week" \
  --data-urlencode "enableContent=true" \
  --data-urlencode "mainText=true"

API Reference

Endpoint

GET https://aisearchapi.cloudsway.net/api/search/smart

Headers

HeaderTypeValueDescription
AuthorizationString{YOUR_AK}Your assigned API Key

Request Parameters

ParameterRequiredTypeDefaultDescription
qYesString-Search query
countNoInteger10Must be 10 / 20 / 30 / 40 / 50
freshnessNoStringnullDay / Week / Month
offsetNoInteger0Pagination offset
enableContentNoBooleanfalseExtract full text
contentTypeNoStringTEXTHTML / MARKDOWN / TEXT
contentTimeoutNoFloat3.0Extraction timeout
mainTextNoBooleanfalseSmart summary fragments

Response Format

{
  "queryContext": {
    "originalQuery": "your search query"
  },
  "webPages": {
    "value": [
      {
        "name": "Article Title",
        "url": "https://example.com/article",
        "datePublished": "2026-02-27T15:46:11.0000000",
        "snippet": "Short summary...",
        "mainText": "Relevant excerpts...",
        "content": "Full webpage text...",
        "score": 0.85
      }
    ]
  }
}

Content Strategy

Choose the right field based on your needs:

FieldLatencyToken CostUse Case
snippetFastLowQuick browsing
mainTextMediumMediumFocused research
contentSlowerHighDeep analysis

Recommended Settings

Quick Research

{"q": "topic", "count": 10}

Focused Research

{"q": "topic", "count": 20, "freshness": "Week", "enableContent": true, "mainText": true}

Deep Research

{"q": "topic", "count": 20, "enableContent": true, "contentType": "MARKDOWN"}

Troubleshooting

Invalid JSON

Use curl directly if the script fails.

Count Parameter Error

Valid values:

10 / 20 / 30 / 40 / 50

Environment Variable Missing

Check configuration:

echo $CLOUDSWAYS_AK

Keywords

web search AI search internet search online search search engine Google search Bing search Perplexity search Brave search Tavily search AI research tool LLM web search AI agent search internet information retrieval


Last Updated: 2026-03-09


---

Files

2 total
Select a file
Select a file to preview.

Comments

Loading comments…