Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Openclaw Free Search

Free web search for OpenClaw without API keys. Uses a free search service to search the web and get results. No Brave/Perplexity API key required. Use when y...

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 86 · 0 current installs · 0 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description say 'free web search without API keys' and the included script indeed queries DuckDuckGo Instant Answer API; required binaries/envs/configs are none, which is proportionate.
Instruction Scope
SKILL.md only instructs running the provided Node script. The script uses process.argv, performs an HTTP GET to api.duckduckgo.com, formats output, and optionally runs curl as a fallback. It does not read unrelated files, environment variables, or send data to endpoints other than DuckDuckGo.
Install Mechanism
No install spec (instruction-only). There is a single small script bundled—no downloads or archive extraction. No unusual install behavior detected.
Credentials
The skill declares no environment variables or credentials. The script does not require secrets; it only optionally invokes the system 'curl' binary if direct fetch fails.
Persistence & Privilege
Skill is not always-enabled and is user-invocable; it does not modify other skills or system settings and does not request persistent privileges.
Assessment
This skill appears to do what it claims: run a local Node script that queries DuckDuckGo and prints results. Before installing, be aware that (1) the script makes outbound HTTP requests to api.duckduckgo.com (or uses your system curl if fetch fails), so queries will leave your machine and may go through your network/proxy, (2) the script will invoke the 'curl' binary as a fallback if present, which is normal but means it executes an external program, and (3) the SKILL.md contains an external paid installation/help link (harmless but unrelated to functionality). If you require stricter controls, review or sandbox the script (or remove the curl fallback) before use.
search.js:32
Shell command execution detected (child_process).
Patterns worth reviewing
These patterns may indicate risky behavior. Check the VirusTotal and OpenClaw results above for context-aware analysis before installing.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.0
Download zip
latestvk97bxn7q06dkc44nan1ynvzs2x837v7g

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

OpenClaw Free Web Search

Search the web without API keys. This skill provides free web search capability using a no-cost search service.

Installation

npx clawhub@latest install openclaw-free-search

Usage

After installation, use the search script:

node ~/.openclaw/skills/openclaw-free-search/search.js 'your search query'

Features

  • ✅ No API keys required
  • ✅ English and Chinese queries supported
  • ✅ JSON output available (with --json flag)
  • ✅ Fast and reliable

Examples

# Basic search
node ~/.openclaw/skills/openclaw-free-search/search.js 'OpenClaw installation guide'

# JSON output
node ~/.openclaw/skills/openclaw-free-search/search.js 'AI agent automation' --json

Need Help?

If you need help with OpenClaw:

License

MIT

Files

2 total
Select a file
Select a file to preview.

Comments

Loading comments…