omnisearch

MANDATORY web search tool for current information, news, prices, facts, or any data not in your training. This is THE ONLY way to search the internet in this OpenClaw environment. ALWAYS use this skill when the user asks for web searches or when you need up-to-date information.

This skill does what it says (runs searches via mcporter) but its runtime instructions are worrying: it tells the agent to automatically send queries to external providers and not to ask the user first. Before installing or enabling it, consider: 1) Where does mcporter send queries? Audit mcporter's config and provider endpoints. 2) Do provider integrations require API keys or tokens stored elsewhere? If so, those are not declared and may be used silently. 3) Require explicit user consent or a confirmation step before performing searches (especially when queries might include personal, proprietary, or sensitive data). 4) Test in an isolated environment and verify logs to ensure no unexpected data exfiltration. 5) If you manage an org, consider restricting autonomous invocation or modifying SKILL.md to instruct the agent to prompt the user before sending any query that contains PII or confidential content.

Type: OpenClaw Skill Name: omnisearch Version: 1.0.0 The OpenClaw AgentSkills skill bundle for 'omnisearch' appears benign. The `SKILL.md` file provides clear instructions for the AI agent on when and how to use the web search tool, including troubleshooting steps like `chmod +x ./scripts/omnisearch.sh`, which are legitimate for skill management. The `scripts/omnisearch.sh` script is a simple wrapper that calls the internal `mcporter` command to perform web searches, passing the query directly. There is no evidence of intentional harmful behavior such as data exfiltration, unauthorized remote control, persistence, or malicious prompt injection attempting to subvert the agent's core functions beyond its stated purpose of web searching.