完全免费的网页搜索，使用 Bing 搜索结果。无需 API key，完全免费使用。当用户需要搜索网页、查找信息时使用此命令。

What to check before installing/using: 1) Clarify the naming mismatch — the skill is labeled 'DDG' but scrapes Bing; if you expect DuckDuckGo behavior this is not the right tool. 2) Inspect and run the included script locally — it only performs HTTPS GETs to cn.bing.com and parses results, which is expected but means your queries are sent to Bing and may be logged. 3) Ensure the Python environment has requests and beautifulsoup4 installed; the skill does not declare these dependencies. 4) The example uses an absolute path to a specific user directory — update the command to the skill's installed path on your system. 5) If you require stronger privacy or an API-backed search, consider alternatives that use an official API or a privacy-focused provider. Overall the behavior is coherent and not overtly malicious, but the naming inconsistency and undeclared dependencies warrant a brief manual review before use.

Type: OpenClaw Skill Name: ddg-free Version: 1.0.0 The skill bundle provides a free web search functionality using Bing. The `scripts/search.py` file correctly implements web scraping for Bing, uses standard libraries, and properly URL-encodes user queries, preventing direct command injection within the Python script. The `SKILL.md` file describes the skill and its usage without containing any instructions for prompt injection, data exfiltration, or other malicious activities against the AI agent or the system. While a general risk of shell injection exists if the OpenClaw agent poorly handles user input when constructing the command string, this is a platform vulnerability and not evidence of malicious intent within the skill bundle itself.