Security checks across malware telemetry and agentic risk
This skill is not clearly malicious, but it persistently rewrites OpenClaw search behavior and runs unpinned external code, so it belongs in Review before use.
Install only if you are comfortable changing OpenClaw's installed search provider files and routing search queries through a locally cloned proxy that uses DuckDuckGo/DDGS. Review or pin the external brave_shim repository and Python dependencies, back up the OpenClaw provider files before patching, and make sure you know how to stop the local service and revert the configuration and file changes.
def run(cmd, check=True, **kwargs):
print(f"Running: {cmd}")
r = subprocess.run(cmd, shell=True, **kwargs)
if check and r.returncode != 0:
sys.exit(f"Failed: {cmd}")
return rvenv_python = "python" # fallback to system python
print(f"Starting brave_shim from {shim_path}...")
subprocess.run(f'"{venv_python}" "{shim_path}"', shell=True)
if __name__ == "__main__":
main()67/67 vendors flagged this skill as clean.