← Back to Skills Marketplace
194
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install web-search-plus-2-8-6
Description
Unified search skill with Intelligent Auto-Routing. Uses multi-signal analysis to automatically select between Serper (Google), Tavily (Research), Exa (Neura...
Usage Guidance
This package appears to be what it claims: a Python-based multi-provider web search aggregator with auto-routing. Before installing or running it: 1) Verify the source provenance (no homepage listed and 'source: unknown' in the registry); prefer code from a known/trusted origin. 2) Review and, if needed, sanitize the .env file placed in the skill directory — the script auto-loads .env and will import those values into the process. 3) Remember that query text is cached to .cache/ by default (may include sensitive queries); set WSP_CACHE_DIR or use --no-cache if that concerns you. 4) If you plan to use Perplexity via Kilo, KILOCODE_API_KEY is required and traffic goes to api.kilo.ai; confirm you are comfortable sending queries to that gateway. 5) Inspect and run setup.py manually (not as root) to review any network tests it performs (changelog notes SSRF protections were added recently). If you need higher assurance, obtain the repo from the upstream GitHub link referenced in the docs or ask the publisher for a signed release/build before enabling the skill in production.
Capability Analysis
Type: OpenClaw Skill
Name: web-search-plus-2-8-6
Version: 1.0.0
The web-search-plus skill is a legitimate search aggregator that routes queries across multiple providers like Serper, Tavily, and SearXNG. The code in scripts/search.py and scripts/setup.py includes proactive security measures, specifically defense-in-depth SSRF protection that validates URLs and blocks private/internal IP ranges and cloud metadata endpoints. The functionality is well-documented, aligns with the stated purpose, and shows no signs of malicious intent, data exfiltration, or unauthorized execution.
Capability Assessment
Purpose & Capability
The name/description (multi-provider web search with auto-routing) matches what the package includes: a Python CLI, provider connectors, routing logic, and local result caching. Required binaries (python3, bash) are appropriate. Provider API keys are optional in the docs (one key suffices), which aligns with being an aggregator that can operate with a single configured provider or a self-hosted SearXNG instance.
Instruction Scope
Runtime instructions direct the agent to run scripts/setup.py and scripts/search.py and to place API keys in environment variables or config.json — all within the search skill's scope. Two operational notes: (1) the code auto-loads a .env file from the skill directory (it will set environment variables found there if not already set), and (2) results are cached to a local .cache/ directory by default, so queries (which may contain sensitive data) are written to disk. The changelog mentions SSRF protection for SearXNG setup checks; the setup wizard is present in the repo and should be reviewed before running.
Install Mechanism
No automated install spec is included (instruction-only behavior plus source files). That is lower-risk than pulling remote binaries. The skill ships Python scripts which will run locally; there are no fetched/executed archives or remote install URLs in the provided files.
Credentials
The skill requests multiple provider API keys (SERPER_API_KEY, TAVILY_API_KEY, EXA_API_KEY, YOU_API_KEY, KILOCODE_API_KEY) but marks them optional and documents that only one provider key is required. This is proportionate for an aggregator. Two practical caveats: (1) the script will auto-load .env from the skill folder (so placing other secrets there could leak them into the skill process), and (2) the cache persists queries locally (WSP_CACHE_DIR can be set to relocate it) — both are operational security considerations rather than signs of malicious behavior.
Persistence & Privilege
The skill is not set 'always: true' and does not request system-wide privileges. It writes cache files into its own .cache/ directory and reads/writes its own config; it does not modify other skills or system-wide agent settings. Autonomous invocation is enabled by default on the platform, which is normal.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install web-search-plus-2-8-6 - After installation, invoke the skill by name or use
/web-search-plus-2-8-6 - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Initial release of web-search-plus (v2.8.6): a unified web search skill with intelligent auto-routing.
- Automatically analyzes queries and selects the best provider among Serper (Google), Tavily (Research), Exa (Neural), Perplexity (AI Answers), You.com (RAG/Real-time), and SearXNG (Privacy/Self-hosted).
- Only one provider API key is required to start; supports adding more for richer results and fallback.
- Includes automatic provider fallback on rate limit, timeout, or other errors.
- Extensive documentation for setup, configuration, key management, and usage examples.
- Offers both auto-routing and manual provider selection with explanation/debug tools.
Metadata
Frequently Asked Questions
What is Web Search Plus 2.8.6?
Unified search skill with Intelligent Auto-Routing. Uses multi-signal analysis to automatically select between Serper (Google), Tavily (Research), Exa (Neura... It is an AI Agent Skill for Claude Code / OpenClaw, with 194 downloads so far.
How do I install Web Search Plus 2.8.6?
Run "/install web-search-plus-2-8-6" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Web Search Plus 2.8.6 free?
Yes, Web Search Plus 2.8.6 is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Web Search Plus 2.8.6 support?
Web Search Plus 2.8.6 is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Web Search Plus 2.8.6?
It is built and maintained by marsxuc (@marsxuc); the current version is v1.0.0.
More Skills