Web Search Instant
v1.1.0Web search using DuckDuckGo Instant Answer API (no API key required). Use when you need to search the web for information, definitions, calculations, conversions, or quick facts. Also use when user mentions "search", "look up", "find information", "what is", "how to", or "google something". The skill provides instant answers, definitions, abstracts, and related topics without requiring external API credentials.
⭐ 5· 2.1k·4 current·4 all-time
by@hahahxx
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the implementation: the main script calls https://api.duckduckgo.com, uses curl/wget (or wget), optionally jq for parsing, and returns instant answers, abstracts, definitions and related topics. Required binaries and optional tools (curl, wget, jq, python3) are appropriate for the task.
Instruction Scope
SKILL.md instructs invoking the included shell script and documents options and limitations. Nothing in the instructions directs the agent to read unrelated files or credentials. Minor notes: examples include a hard-coded working-directory path (/home/hxx/clawd/tools) which is environment-specific and unnecessary; SKILL.md suggests installing jq and shows an incorrect npm install example (jq is not an npm package).
Install Mechanism
No install spec — instruction-only plus bundled shell scripts. No network download/install steps are executed by an installer. This is low-risk and proportionate to a CLI utility.
Credentials
The skill requests no environment variables, no credentials, and no config paths. It only requires standard client tools (curl/wget, optional jq, python3 fallback) — all proportional to making HTTP requests and parsing JSON.
Persistence & Privilege
Skill does not request always:true, does not modify other skills or global agent settings, and does not request permanent presence or elevated privileges.
Assessment
This skill appears coherent and limited to querying DuckDuckGo's Instant Answer API. Things to consider before installing:
- Privacy: queries (including any sensitive text) are sent to api.duckduckgo.com — avoid sending secrets or private data through the skill.
- Runtime tools: the script uses curl or wget to make requests and will use jq if present (or fall back to brittle grep/sed parsing). It also uses python3 as a URL-encoding fallback. Ensure those binaries are trusted on your system.
- Minor issues: SKILL.md/test docs reference an absolute path (/home/hxx/clawd/tools) and suggest installing jq via 'npm install -g jq' (incorrect). These are documentation issues, not malicious behavior.
- Audit before running: if you plan to install/run the bundled script on production systems, review web-search.sh yourself (it is small and readable) and run the test suite locally. If you need stricter privacy, do not use the skill or route requests through a trusted proxy.Like a lobster shell, security has layers — review code before you run it.
latestvk97axwkmv727syfvjrbk0sqr8580dpsp
License
MIT-0
Free to use, modify, and redistribute. No attribution required.