LightRAG Search Skill
ReviewAudited by ClawScan on May 10, 2026.
Overview
The skill mostly does what it says, but its helper disables HTTPS certificate checks, which can expose or alter your LightRAG queries and API key.
Install only if you are comfortable editing or auditing the helper script. Before using API keys or sensitive queries, remove the TLS bypass, connect only to trusted HTTPS LightRAG servers with valid certificates, and protect ~/.lightrag_config.json.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A network attacker or misconfigured proxy could intercept API keys, read user queries, or tamper with returned knowledge-base context.
The helper explicitly disables HTTPS server identity and certificate validation before sending LightRAG API requests.
ctx.check_hostname = False ctx.verify_mode = ssl.CERT_NONE
Do not disable TLS verification by default. Use HTTPS with valid certificates, remove the CERT_NONE configuration, and only connect to trusted LightRAG servers.
Anyone who can read the local config file may be able to use the configured LightRAG API key.
The helper stores an optional LightRAG API key in the user's local configuration file for later authenticated requests.
config["servers"][args.alias] = {
"url": args.url,
"api_key": args.key,
"mode": args.mode
}Store only keys with the minimum required privileges, protect the config file permissions, and remove unused keys.
If the knowledge base contains misleading text or prompt-like instructions, it may affect generated writing or decisions.
The skill is designed to feed retrieved knowledge-base content into later model work, which is normal for RAG but can influence outputs if the content is untrusted.
Pass the resulting context to your writing task/model.
Treat retrieved context as untrusted reference material, verify important claims, and avoid following instructions found inside retrieved documents unless the user explicitly approves them.