Claw Search
v2.0.0Provides free web, image, news search, and autocomplete suggestions via Claw Search API without requiring an API key.
⭐ 0· 138·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description promise (free web/image/news search without API key) matches the code and SKILL.md which call https://www.claw-search.com/api/* endpoints. There are no unexpected binaries, installs, or credential requests that don't belong to a web-search skill.
Instruction Scope
SKILL.md instructs only simple fetch requests to the documented endpoints (search, images, news, suggest). Minor documentation mismatches: SKILL.md/README mention a DuckDuckGo fallback and an optional CLAW_SEARCH_URL env var, but index.js does not implement a DuckDuckGo fallback and the skill declares no required env vars. This is a documentation inconsistency rather than malicious behavior.
Install Mechanism
No install spec and no packaged installs — instruction-only usage with a small JS wrapper file. Nothing is downloaded or written to disk by an installer in the manifest.
Credentials
The skill requests no environment variables, credentials, or config paths. README mentions an optional CLAW_SEARCH_URL environment variable (not declared in requires.env) — a harmless convenience but not required. There are no secrets requested or accessed.
Persistence & Privilege
always is false and the skill does not request persistent system-level privileges or attempt to modify other skills. Autonomous invocation (default) is allowed but appropriate for a search integration.
Assessment
This skill appears to do what it claims: it makes HTTPS requests to https://www.claw-search.com and returns JSON search results. Before installing, consider: (1) Verify the legitimacy of the claw-search.com service (who operates it, privacy/data-retention and terms) since queries you send go to that third party. (2) Test endpoints manually to confirm behavior and rate limits. (3) Be cautious about sending sensitive data in queries because there is no API key or obvious access control. (4) Note the minor documentation mismatches (a claimed DuckDuckGo fallback and an optional CLAW_SEARCH_URL env var) — ask the publisher to clarify if you need those features. If you require stronger trust guarantees, prefer a search skill from a known publisher or a provider with published privacy/security policies.Like a lobster shell, security has layers — review code before you run it.
latestvk97chbky1653qv9nrkgzaqwabh83gcs1
License
MIT-0
Free to use, modify, and redistribute. No attribution required.