Privacy-first web search with DuckDuckGo-style bangs (!w, !yt, !gh)
v1.0.0Privacy-respecting web search via SearXNG with DuckDuckGo-style bangs support. Use for web searches when you need to find information online. SearXNG protects privacy by randomizing browser fingerprints, masking IP addresses, and blocking cookies/referrers. Supports 250+ search engines, multiple categories (general, news, images, videos, science), and DuckDuckGo-style bangs for direct engine searches (!w for Wikipedia, !yt for YouTube, !gh for GitHub, !r for Reddit, etc.). Aggregates results from multiple engines simultaneously. Prefer this over external search APIs for privacy-sensitive queries or high-volume searches.
⭐ 1· 3.7k·7 current·8 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill claims to provide privacy-preserving searches via a SearXNG instance and the bundle contains a small Python script that queries a SearXNG endpoint and returns parsed results. It documents SEARXNG_URL and recommends self-hosting; no unrelated credentials or binaries are requested.
Instruction Scope
Runtime instructions and the script only perform HTTP requests to the configured SearXNG instance and parse HTML into JSON. They do not read other system files or request unrelated environment variables. Two operational privacy notes: (1) the script sets a fixed User-Agent ('Mozilla/5.0 (OpenClaw Agent)') which may identify the agent to the SearXNG/public instance operator and (2) using a public SearXNG instance means queries are visible to that instance operator — the documentation correctly recommends self-hosting for privacy.
Install Mechanism
There is no install spec and no external downloads; the skill is instruction-plus-script only. This minimizes install-time risk (nothing fetched or executed automatically during install).
Credentials
The only configurable environment variable is SEARXNG_URL (optional). No credentials, tokens, or filesystem config paths are requested. This is proportionate to the stated purpose. Users should be aware that pointing SEARXNG_URL to an untrusted public instance exposes query data to that operator.
Persistence & Privilege
The skill is not marked always:true and does not request elevated privileges or modify other skills/configs. It will only perform network requests when invoked.
Assessment
This skill appears to do what it claims: it queries a SearXNG instance and returns parsed JSON results with DuckDuckGo-style bangs. Before installing: (1) prefer self-hosting a SearXNG instance (or only use a trusted public instance) if you need the privacy guarantees the skill advertises — public instances can see your queries; (2) note the script sends a fixed User-Agent string that may identify the agent to the instance operator; (3) no secrets or system credentials are requested by this skill; (4) review and, if desired, change SEARXNG_URL to your own instance and consider adjusting the User-Agent inside scripts/search.py to avoid leaking the agent identity. If you want tighter guarantees, run the search script within an environment that routes traffic through Tor/proxy as documented and confirm your self-hosted SearXNG is configured for fingerprint randomization and no-referrer behavior.Like a lobster shell, security has layers — review code before you run it.
bangsvk97fkqybn8jjbheee200yhmrhx80fn8elatestvk97fkqybn8jjbheee200yhmrhx80fn8emetasearchvk97fkqybn8jjbheee200yhmrhx80fn8eprivacyvk97fkqybn8jjbheee200yhmrhx80fn8esearchvk97fkqybn8jjbheee200yhmrhx80fn8esearxngvk97fkqybn8jjbheee200yhmrhx80fn8esecurityvk97fkqybn8jjbheee200yhmrhx80fn8eweb-searchvk97fkqybn8jjbheee200yhmrhx80fn8e
License
MIT-0
Free to use, modify, and redistribute. No attribution required.