API Hunter

PassAudited by ClawScan on May 1, 2026.

Overview

API Hunter is a purpose-aligned search/report helper, with only minor review notes around unpinned Python dependencies and its local search-service network use.

This skill appears safe for its stated purpose. Before installing, be aware that it uses Python web-request dependencies and relies on a local search service at localhost:8888; treat returned API listings as unverified and avoid using sensitive information as search input.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing unpinned dependencies can result in different package versions being installed over time.

Why it was flagged

The setup instructions install third-party Python packages without pinned versions and without a formal install spec. This is common and purpose-aligned for a Python web-search helper, but it is still a supply-chain detail users should notice.

Skill content
pip install beautifulsoup4 requests
Recommendation

Install in a virtual environment and consider pinning dependency versions before use.

What this means

Your search requirements may be sent to whatever service is running on localhost port 8888.

Why it was flagged

The skill sends user-provided feature queries to a local HTTP search service. This is aligned with the stated API-hunting purpose, but it is an external/local service dependency not declared in requirements.

Skill content
SEARCH_URL = "http://localhost:8888/search" ... requests.get(SEARCH_URL, params={ 'q': query, 'format': 'json', 'num': 5 }, timeout=10)
Recommendation

Use only with a trusted local search service, and avoid putting secrets or private business details in search prompts.