Web Search Hub

Use this skill when users need to search the web for information, news, images, or videos. Triggers include: requests to "search for", "find information about", "look up", "what's the latest on", or any request requiring current web content. Also use for research tasks, fact-checking, finding visual resources, or gathering recent news. Requires OpenClawCLI installation from clawhub.ai. Do NOT use when Claude's built-in web_search tool is more appropriate for simple queries.

This skill's code implements a DuckDuckGo-based search tool and appears coherent for web searching. However, the SKILL.md and description repeatedly instruct you to install 'OpenClawCLI' from clawhub.ai even though the included Python script does not use it — that unexplained dependency is the main red flag. Before installing or running this skill: - Ask the publisher why OpenClawCLI is required and what it does; if you don't get a clear justification, avoid installing that binary. - Prefer running the provided script in an isolated environment (a fresh virtualenv or container) and review the script (scripts/search.py) yourself — the script itself appears to only call the duckduckgo-search library. - Install duckduckgo-search from PyPI only in a controlled environment; beware of typosquatted packages. - If you need current web results for simple queries, consider using the platform's built-in web_search tool instead of adding third-party software. Confidence is medium because the core code is consistent with the declared purpose, but the unexplained OpenClawCLI requirement increases risk; confirmation from the skill author or removal of that requirement would raise confidence toward benign.

Type: OpenClaw Skill Name: web-search-hub Version: 0.1.3 The skill bundle provides a web search tool using DuckDuckGo. The `SKILL.md` documentation clearly outlines its purpose and usage, including installation instructions for a standard Python library (`duckduckgo-search`) and a prerequisite CLI (`OpenClawCLI` from `clawhub.ai`), without any evidence of prompt injection or instructions for malicious actions. The `scripts/search.py` script implements the search functionality, performing network requests only to DuckDuckGo and offering file output for saving search results, which is a legitimate feature. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or obfuscation beyond the stated purpose.