← Back to Skills Marketplace
elmaslouhymouaad

Advanced Searxng Search Skill

by Mouaad · GitHub ↗ · v0.1.1
cross-platform ⚠ suspicious
463
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install searxng-search-skill
Description
Perform privacy-focused metasearch using local or remote SearXNG instances with retries, timeouts, category, time, and engine-specific filters.
Usage Guidance
This package appears to implement exactly what it says (a client for SearXNG instances) and does not request unrelated credentials. However, several red flags should be resolved before installing: 1) the registry lists no install spec but the skill includes packaging metadata and SKILL.md suggests pip install — verify the package source (PyPI or a trustworthy GitHub repo) before running pip; 2) setup.py advertises a CLI entrypoint searxng_skill.cli:main but no cli.py is present in the bundle — that suggests a mispackaged or incomplete release; 3) SKILL.md/README reference inconsistent repository/usernames — confirm the authoritative upstream; 4) prefer pointing the skill at a local or trusted SearXNG instance (default is localhost) rather than accepting a remote URL you don't control; and 5) if you plan to install, review the repository contents (especially any missing/extra files), run installation in a sandbox or VM, and inspect network calls (or run with network disabled) until you trust the package. If the author or a well-known source (PyPI/GitHub org) can't be confirmed, treat installation as higher risk.
Capability Analysis
Type: OpenClaw Skill Name: searxng-search-skill Version: 0.1.1 The skill is designed to interact with a SearXNG metasearch instance, which involves making HTTP requests to a configurable `instance_url` (searxng_skill/core.py). It also includes functionality to export search results to local files at a user-specified `filepath` (searxng_skill/utils.py). While these capabilities align with the stated purpose of a search skill, they introduce a vulnerability risk if the `instance_url` or `filepath` parameters are controlled by an attacker (e.g., via prompt injection against the agent using this skill) to target malicious endpoints or write to sensitive file system locations. There is no evidence of intentional malicious behavior within the skill's code or instructions, but the broad capabilities could be exploited.
Capability Assessment
Purpose & Capability
The code implements an HTTP client that queries a user-supplied SearXNG instance, supports retries, timeouts, categories, and export — which matches the skill name/description. There are no unrelated network endpoints or extraneous credential requests in the code. However, the registry metadata lists no required env vars while SKILL.md and the code rely on environment/configuration (SEARXNG_URL, timeouts, etc.), so the declared requirements are incomplete.
Instruction Scope
SKILL.md instructs the agent to read configuration from .env or config.json and then call the library; the code only reads those configuration values and performs HTTP requests to the configured SearXNG instance. The instructions do not ask the agent to read arbitrary user files, secrets unrelated to SearXNG, or to exfiltrate results to unknown endpoints.
Install Mechanism
The registry lists no install spec, but the bundle includes setup.py/pyproject and SKILL.md contains pip install metadata. Inconsistencies: SKILL.md metadata/homepage point to 'yourusername' while README clone URL points to a different repo (mouaad-ops), and setup.py defines a console_script entry 'searxng-skill=searxng_skill.cli:main' while no searxng_skill/cli.py is present in the file list. These packaging/mismatch issues increase supply-chain risk (could be incomplete, mispackaged, or a stale copy).
Credentials
The skill does not request secrets or cloud credentials and only needs a SearXNG instance URL and non-sensitive options (timeouts, safesearch, user agent). However, the registry declares no required env vars while SKILL.md recommends several (SEARXNG_URL, SEARXNG_TIMEOUT, etc.). This mismatch is minor but should be clarified in registry metadata.
Persistence & Privilege
The skill does not request always:true, does not write to other skills' configs, and only provides methods to save its own config or export search results to files. It requires normal network access to the configured SearXNG instance; autonomous invocation is allowed (default) but not unusual for skills.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install searxng-search-skill
  3. After installation, invoke the skill by name or use /searxng-search-skill
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.1
- Updated skill.
Metadata
Slug searxng-search-skill
Version 0.1.1
License
All-time Installs 1
Active Installs 1
Total Versions 1
Frequently Asked Questions

What is Advanced Searxng Search Skill?

Perform privacy-focused metasearch using local or remote SearXNG instances with retries, timeouts, category, time, and engine-specific filters. It is an AI Agent Skill for Claude Code / OpenClaw, with 463 downloads so far.

How do I install Advanced Searxng Search Skill?

Run "/install searxng-search-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Advanced Searxng Search Skill free?

Yes, Advanced Searxng Search Skill is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Advanced Searxng Search Skill support?

Advanced Searxng Search Skill is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Advanced Searxng Search Skill?

It is built and maintained by Mouaad (@elmaslouhymouaad); the current version is v0.1.1.

💬 Comments