← Back to Skills Marketplace
225
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install taizi-brave-search
Description
Web search and content extraction via Brave Search API. Use for searching documentation, facts, or any web content. Lightweight, no browser required.
Usage Guidance
This skill's code scrapes Brave's public search HTML and fetches page content — that matches the 'search and extract' purpose. However, SKILL.md incorrectly says it uses the Brave Search API and needs BRAVE_API_KEY while the code never reads an API key. Do not provide any unrelated secrets (API keys) to this skill. If you plan to install/run it: (1) verify the source/trustworthiness (the registry owner and _meta.json disagree), (2) review the included code (you already have) and confirm you accept that it performs network requests to arbitrary URLs, (3) be cautious running 'npm ci' as it will install dependencies from npm, and (4) avoid running it in environments where fetching internal or sensitive URLs could leak data. If you need a skill that uses a Brave Search API key, ask the author for an updated version that actually uses the API and documents required env vars correctly.
Capability Analysis
Type: OpenClaw Skill
Name: taizi-brave-search
Version: 1.0.0
The skill bundle provides legitimate web search and content extraction functionality using Brave Search and standard libraries like @mozilla/readability and jsdom. While SKILL.md claims to use the Brave Search API and requests a BRAVE_API_KEY, the implementation in search.js actually scrapes the public Brave Search web interface; however, this is a functional discrepancy rather than a security threat. There is no evidence of data exfiltration, malicious command execution, or prompt injection.
Capability Assessment
Purpose & Capability
SKILL.md and description claim 'Brave Search API' and say 'Needs env: BRAVE_API_KEY', but the packaged code (search.js) performs HTTP GET requests to https://search.brave.com/search?q=... and parses the HTML; there is no use of an API key or an API endpoint. Asking for an API key in docs is unexplained and disproportionate to the code.
Instruction Scope
Runtime instructions are concrete (run npm ci in the skill folder and call the included scripts). They instruct fetching external URLs (Brave search and arbitrary pages returned by results or provided to content.js) which is consistent with the stated purpose, but the SKILL.md's API-key requirement is misleading. The scripts fetch and parse arbitrary web pages — expected for this skill but potentially sensitive if run against internal URLs.
Install Mechanism
There is no formal install spec in the registry, but SKILL.md tells users to run 'npm ci' in the skill directory. That will pull many dependencies from the npm registry (package-lock.json included). This is standard for Node projects but carries network/install risk (moderate) compared with an instruction-only skill with no npm install.
Credentials
Registry metadata declares no required env vars, but SKILL.md claims BRAVE_API_KEY is needed. The code does not read any environment variables. Requesting an API key in docs without using it is disproportionate and misleading; do not provide unrelated secrets.
Persistence & Privilege
always is false and the skill does not request elevated or persistent platform privileges, nor does it modify other skills or agent-wide settings. It runs as an on-demand script and prints output to stdout.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install taizi-brave-search - After installation, invoke the skill by name or use
/taizi-brave-search - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of taizi-brave-search.
- Provides headless web search via Brave Search API (no browser required).
- Supports extracting and returning readable content from web pages as markdown.
- Simple CLI: search, specify number of results, fetch content for URLs.
- Useful for searching documentation, factual info, or fetching precise page content.
Metadata
Frequently Asked Questions
What is Taizi Brave Search?
Web search and content extraction via Brave Search API. Use for searching documentation, facts, or any web content. Lightweight, no browser required. It is an AI Agent Skill for Claude Code / OpenClaw, with 225 downloads so far.
How do I install Taizi Brave Search?
Run "/install taizi-brave-search" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Taizi Brave Search free?
Yes, Taizi Brave Search is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Taizi Brave Search support?
Taizi Brave Search is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Taizi Brave Search?
It is built and maintained by fresh3 (@fresh3); the current version is v1.0.0.
More Skills