Search Agent Skill

AI-powered search agent that performs intelligent web searches, aggregates results, and provides summarized answers with source citations. Use when: user nee...

This skill appears to implement a legitimate web-search and summarization tool, but there are a few things to check before installing or using it: - Confirm required credentials: the SKILL.md and index.js reference SEARCH_API_KEY and AI_MODEL, but the registry metadata declares none. You should assume an API key is needed; ask the publisher or check the upstream repository for which search service and key format are required. - Verify source provenance: registry 'Source' is unknown while package.json points to github.com/clawhub/search-agent. Inspect that repository (or the uploaded files) to ensure it matches and is maintained by a trustworthy owner. - Network behavior: the skill will fetch arbitrary webpages and call search APIs. Do not run it in an environment containing sensitive internal-only URLs you don't want exposed. Avoid giving it private or sensitive queries unless you control the search target and understand where requests go. - Review dependencies & run audits: the package uses axios and cheerio (common), but run a dependency audit and optionally sandbox execution before granting it access to production systems. - Ask for clarification: request that the publisher update the registry metadata to list SEARCH_API_KEY (and any other required env vars) and provide the concrete search API endpoints used (performSearch currently contains placeholder endpoints). If the publisher confirms the above and provides a verifiable source repo/release, and you only provide the minimal API key with rate/permission controls, the inconsistencies would be explainable and the risk lowered.

Type: OpenClaw Skill Name: search-agent Version: 1.0.0 The search-agent skill bundle is a well-documented template for an AI-powered research tool. The core logic in index.js uses standard libraries like axios and cheerio to fetch and parse web content, while cli.js provides a functional command-line interface. The SKILL.md and README.md files provide clear instructions and architectural overviews without any evidence of prompt injection or malicious intent. Although the search API integration is currently a placeholder, the code lacks any high-risk behaviors such as data exfiltration, unauthorized execution, or obfuscation.