Web Search via SearXNG
v1.0.0Search the web using SearXNG meta-search engine. Use when the user wants to search the web, find current information, look up facts, news, or any query that...
⭐ 0· 55·0 current·0 all-time
bySimon@simoncatbot
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name, description, SKILL.md, config, and scripts/search.py all align: the code calls SearXNG instances, aggregates results, and exposes CLI/Python usage consistent with a web-search skill. No unrelated credentials, binaries, or services are requested.
Instruction Scope
Runtime instructions and the code limit activity to building search requests, loading a local config file, and calling external SearXNG instance URLs. The SKILL.md does not instruct reading unrelated system files, harvesting environment variables, or posting data to unexpected endpoints.
Install Mechanism
There is no install spec (lowest-risk) but the bundle includes Python code that will be executed by the agent. SKILL.md references a requirements.txt and tests that are not present in the file manifest — a packaging/metadata omission rather than a direct security hazard, but you should ensure required Python packages (requests, PyYAML) are installed before running.
Credentials
The skill requests no environment variables, no credentials, and no config paths beyond its own config/searxng.yaml. That is proportionate for a search client. The code sets a browser-like User-Agent header (expected for search requests) and does not attempt to access unrelated credentials.
Persistence & Privilege
always:false and normal user-invocable/autonomous invocation defaults. The skill does not request permanent platform presence, nor does it modify other skills or system-wide settings.
Assessment
This skill is coherent and appears safe for its intended purpose, but a few housekeeping checks are recommended before installing or running it: 1) Ensure you run it with Python 3.8+ and install required packages (requests, PyYAML) — SKILL.md mentions requirements.txt but that file is not included. 2) The package references tests and a module import form (from searxng import SearXNGClient) that may require adjusting PYTHONPATH or running the script directly. 3) Because it queries external SearXNG instances by default (https://searx.be and other public instances), consider self-hosting a SearXNG instance or verifying the public instance you choose is trusted to avoid sending queries to unknown third-party servers. 4) If you need higher assurance, inspect and run the code in a sandboxed environment and add an explicit requirements.txt or packaging to ensure predictable dependencies.Like a lobster shell, security has layers — review code before you run it.
latestvk973cn2a3rfdhjw0fjkbz6ch2x84qp2k
License
MIT-0
Free to use, modify, and redistribute. No attribution required.