Searxng Web Search
v0.1.0Plugin bundle (nix)Search the web using SearXNG. Use when you need current information, research topics, find documentation, verify facts, or look up anything beyond your knowledge. Returns ranked results with titles, URLs, and content snippets.
Bundles the skill pack, CLI binary, and config requirements in one Nix install.
⭐ 3· 4.6k·25 current·31 all-time
MIT-0
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
high confidencePurpose & Capability
Name/description match the declared requirements: the skill needs the 'bb' (babashka) binary and a SEARXNG_URL to talk to a SearXNG instance. Those two requirements are proportionate to a client that queries a SearXNG JSON API.
Instruction Scope
Runtime instructions are narrowly scoped to performing searches via a babashka script and handling rate limiting. They do reference reading/writing a local filesystem-based state file (.searxng-last-request) for rate limiting and suggest troubleshooting commands (curl, systemctl, journalctl) that an agent could run, so the agent may perform local calls if instructed. The script will perform network requests to the SEARXNG_URL (defaulting to http://localhost:8888 if unset).
Install Mechanism
There is no install spec (instruction-only), which is low risk in general — but the SKILL.md repeatedly instructs running 'bb scripts/search.clj' while no scripts/search.clj file is bundled with the skill. That mismatch means the skill as packaged cannot operate without external files and prevents review of the actual executable logic; this is an important incoherence.
Credentials
Only SEARXNG_URL is required, which is appropriate for a web-search client. No unrelated secrets, keys, or system config paths are requested. Note: the skill falls back to localhost if SEARXNG_URL is unset, which could cause unexpected network access to local services.
Persistence & Privilege
The skill does not request elevated or persistent platform privileges and is not always-enabled. It will create a local rate-limit state file (.searxng-last-request) per its instructions; this is limited persistence but should be disclosed to users. Autonomous invocation is allowed (platform default) but not by itself a reason to flag the skill.
What to consider before installing
This skill appears to be a straightforward SearXNG client, but it has a critical inconsistency: SKILL.md instructs running 'bb scripts/search.clj' yet the package does not include scripts/search.clj. Before installing or enabling the skill, do the following: 1) Ask the publisher to provide the missing scripts/search.clj and any other runtime files so you can inspect the code. 2) If you get the script, review it for network endpoints, credential usage, filesystem writes, and any calls to arbitrary executables. 3) Ensure 'bb' (babashka) is the intended runtime and that SEARXNG_URL points to a trusted SearXNG instance (avoid pointing it at unknown external hosts). 4) Be aware the script writes a local file (.searxng-last-request) for rate limiting; if that is a concern, run it in a controlled directory or sandbox. 5) If the publisher cannot provide the script, treat the skill as incomplete/untrustworthy because its runtime behavior cannot be audited.Like a lobster shell, security has layers — review code before you run it.
Plugin bundle (nix)
Skill pack · CLI binary · Config
SKILL.mdCLIConfig
latestvk978a5vz1ybjfcd7ypbng8bgqs809br6
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🔍 Clawdis
Binsbb
EnvSEARXNG_URL
Install via Nix
nix-clawdbot
programs.clawdbot.plugins = [
{
source = "babashka";
}
];