SearXNG Search CLI (Free, Self-hosted, Auto-deploy, Multi-Channel)

Use self-hosted SearXNG search engine (Free, Self-hosted, Auto-deploy, Multi-Channel). SearXNG is a free meta search engine that aggregates 200+ search engin...

Security Scan

The skill is internally coherent with installing and running a self-hosted SearXNG instance, but it performs high-risk install actions (remote curl|sh, writes to /etc, systemctl enable, sudo symlink) that deserve manual review or safer deployment (container/VM) before use.

Purpose & Capability

Name/description match the implementation: the script clones searxng, creates a venv, configures JSON API, starts/stops the webapp, and exposes a search CLI. Required capabilities and files are appropriate for a self-hosting installer/CLI.

Instruction Scope

SKILL.md + ONBOARDING direct the agent/user to run an installer that downloads tools, clones GitHub, edits settings.yml, copies limiter.toml to /etc, and runs systemctl --user. All are within the stated purpose (install/manage SearXNG) but they involve system-level changes and network downloads that increase risk; they also instruct creating sudo symlinks and copying files to /etc which require elevated privileges.

Install Mechanism

No formal install spec but the runtime script invokes remote installation: curl -LsSf https://astral.sh/uv/install.sh | sh to install 'uv'. Executing a remote install script from a non-major host and piping it to sh is high risk. The script also git-clones upstream and runs shell commands with shell=True. These are coherent for installing SearXNG but are sensitive operations that should be audited before execution.

Credentials

The skill does not request unrelated credentials or environment variables. It optionally uses SEARXNG_SECRET (reasonable for the service). No extraneous secret exfiltration or unrelated cloud keys are required.

Persistence & Privilege

The skill writes a per-user systemd service and suggests enabling it (systemctl --user enable) and creating system-wide symlinks (/usr/local/bin) and copying files into /etc. Persisting as a user service and installing system files is expected for this installer, but these actions require care (privileged file writes, potential systemd config changes). always:false and normal autonomous invocation are used.

Scan Findings in Context

[no_findings] expected: The provided static scan reported no findings. Manual review did identify high-risk patterns in the script (curl | sh from astral.sh, subprocess.run(..., shell=True), copying to /etc, pkill/systemctl calls). Those patterns can be expected for an installer but increase risk and should be reviewed.

What to consider before installing

This skill appears to do what it claims (install and run a self-hosted SearXNG) but its installer performs sensitive operations: it downloads and executes a remote install script (curl | sh), clones code from GitHub, edits configuration files, copies limiter.toml to /etc (may require sudo), and writes/enables a systemd service. Before installing: (1) do not run the installer on your main machine — prefer a disposable VM or container; (2) inspect the remote install script (https://astral.sh/uv/install.sh) or install 'uv' manually instead of piping to sh; (3) avoid running commands with sudo blindly and review any files copied to /etc; (4) ensure the service is bound to localhost and keep SEARXNG_SECRET private; (5) if you only need search results, prefer connecting to an already-running trusted instance rather than running the install. If you want, I can list the exact lines that are risky or produce a safe alternative set of commands to install in a container.

SearXNG-CLI (Free, Self-hosted, Search Engine Aggregator) | SearXNG CLI（免费、自托管、搜索引擎聚合器）

• Author: LeeShunEE
• Organization: KinemaClawWorkspace
• GitHub: https://github.com/KinemaClawWorkspace/searxng-search-cli

Use SearXNG self-hosted search API for fast, accurate searching.

使用 SearXNG 自托管搜索 API 进行快速、准确的搜索。

⚠️ Before First Use | 首次使用必读

首次使用此 skill 前，必须先读取 ONBOARDING.md 完成环境配置。

• 首次配置 → 读取 ONBOARDING.md 完成全部步骤
• 环境不可用（命令不存在、依赖缺失、搜索失败）→ 读取 ONBOARDING.md Troubleshooting 排查修复
• 配置完成后 → 直接使用下方 Run Commands

Run Commands | 使用命令

# Search | 搜索
searxng-search search "your query"

# Specify engine | 指定引擎
searxng-search search "git clone" --engine github

# Specify language | 指定语言
searxng-search search "AI News" --lang zh

# Pagination | 分页
searxng-search search "llm" --page 2

# Time filter | 时间过滤
searxng-search search "python" --time-range month

Command List | 命令列表

Command	Description	说明
install	One-click install SearXNG	一键安装 SearXNG
start	Start service	启动服务
stop	Stop service	停止服务
restart	Restart service	重启服务
status	Check service status	查看服务状态
search <query>	Search	搜索
enable	Enable auto-start	开机自启
disable	Disable auto-start	取消开机自启

Configuration | 配置

• SEARXNG_PORT - Port (default 8888) | 端口 (默认 8888)
• SEARXNG_HOST - Bind address (default 127.0.0.1) | 绑定地址 (默认 127.0.0.1)
• SEARXNG_SECRET - Auth key (auto-generated if not set) | 认证密钥 (自动生成)

Search Parameters | 搜索参数

Parameter	Short	Description	Example
--engine	-e	Specify engine	github, google
--lang	-l	Language	zh, en, auto
--page	-p	Page number	1, 2, 3
--time-range	-t	Time range	day, week, month, year
--safe-search	-s	Safe search	0, 1, 2
--limit		Max results (default 5)	10

Available Engines | 可用引擎

General: google, bing, brave, duckduckgo, yandex, startpage, qwant Code/Dev: github, gitlab, stackoverflow, npm, pypi Academic: arxiv, pubmed, wikipedia, google-scholar Video/Image: youtube, vimeo, pexels, pixabay

Known Limitations | 已知限制

• 部分引擎不稳定：DuckDuckGo 可能触发 CAPTCHA、Brave 可能 403，属上游外部限制
• 首次搜索较慢：可能需要 5-30 秒，后续请求会加速
• 推荐部署在有稳定网络出口的宿主机上

Related Documentation | 相关文档

• SearXNG Official Docs | SearXNG 官方文档
• GitHub