← 返回 Skills 市场

Local Websearch 1

Name: Local Websearch 1
Author: eg-yks

作者 eg-yks · GitHub ↗ · v1.0.0

cross-platform ⚠ suspicious

720

总下载

当前安装

版本数

在 OpenClaw 中安装

/install local-websearch-1

功能描述

Search the web using a self-hosted SearXNG metasearch engine aggregating multiple sources without API keys and returning JSON results.

使用说明 (SKILL.md)

SearXNG Web Search

Privacy-respecting metasearch via your self-hosted SearXNG instance.

When to use (trigger phrases)

Use this skill when the user asks:

"search the web for..."
"look up..." / "find information about..."
"what is..." (when current info needed)
"research..." / "search for..."
"google..." (redirect to privacy-respecting search)

Quick start

python3 {baseDir}/scripts/searxng_search.py "your query"
python3 {baseDir}/scripts/searxng_search.py "query" --count 10
python3 {baseDir}/scripts/searxng_search.py "query" --lang de

Setup

Set SEARXNG_URL environment variable:

export SEARXNG_URL="http://your-searxng-host:8888"

Flags

Flag	Default	Description
`-n`, `--count`	5	Results to return (1-20)
`-l`, `--lang`	auto	Language code (en, de, fr, es, etc.)

Output

Returns JSON:

{
  "query": "search terms",
  "count": 5,
  "results": [
    {"title": "...", "url": "...", "description": "...", "engines": ["google", "brave"], "score": 1.5}
  ]
}

Notes

No API keys needed—SearXNG aggregates upstream engines
Results include source engines for transparency
Scores indicate relevance (higher = better)
For news, add "news" to query or use --lang for regional results

安全使用建议

This skill's code appears to implement a straightforward SearXNG client, but the package metadata and runtime instructions are inconsistent. Before installing: (1) confirm the author fixes metadata (declare SEARXNG_URL and python3 as requirements and correct the command path to where the script actually lives), (2) verify the owner/slug in _meta.json matches the registry entry, and (3) only point SEARXNG_URL at a SearXNG instance you control or trust — the agent will send every search query there, so a malicious or public endpoint could receive private queries. If you cannot verify these fixes, treat the skill as untrusted.

功能分析

Type: OpenClaw Skill Name: local-websearch-1 Version: 1.0.0 The skill is designed to perform web searches via a self-hosted SearXNG instance. The `SKILL.md` provides clear, benign instructions for the AI agent and the user, with no evidence of prompt injection attempts. The `searxng_search.py` script correctly implements the stated functionality, using standard Python libraries for network communication and argument parsing. It relies on a user-configured `SEARXNG_URL` environment variable and handles input safely, preventing common injection vulnerabilities. There is no evidence of intentional harmful behavior, data exfiltration, persistence, or unauthorized execution.

能力评估

⚠ Purpose & Capability

The skill claims no required env vars or binaries in the registry metadata, but the SKILL.md metadata and the script require SEARXNG_URL and python3. Also the registry slug/ownerId differ from _meta.json values. These mismatches mean the declared purpose (local SearXNG search) is fine, but the declared requirements are incomplete/inconsistent.

ℹ Instruction Scope

SKILL.md and the included Python script stay within the stated purpose: they only call the user-provided SearXNG instance and return JSON. The script does not read arbitrary host files or access other credentials. However, the SKILL.md's command points to scripts/searxng_search.py while the provided file is searxng_search.py at the repository root — a runtime path mismatch that will break execution.

✓ Install Mechanism

There is no install spec (instruction-only with an included script). No external downloads or package installs are requested, which is low risk. The script is plain Python and does simple HTTP requests.

⚠ Credentials

The only environment requirement needed by the script is SEARXNG_URL (and python3). Those are appropriate for a self-hosted SearXNG client, but the registry metadata does not declare them. That omission is a red flag because users won't be informed that the agent will send queries to whatever URL is set — which could be a remote endpoint of unknown trustworthiness.

✓ Persistence & Privilege

No elevated persistence is requested. always is false and the skill does not modify other skills or system configuration. Autonomous invocation is enabled by default but is not combined with broad credentials or persistence here.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install local-websearch-1
安装完成后，直接呼叫该 Skill 的名称或使用 /local-websearch-1 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

- Initial release of the searxng skill for private, web-based search with a self-hosted SearXNG instance. - Supports aggregation of multiple search engines (Google, Brave, DuckDuckGo, etc.) without API keys. - Provides command-line usage with options for result count and language selection. - Outputs structured JSON including query, results, source engines, and relevance scores. - Requires setting the SEARXNG_URL environment variable for configuration.

元数据

Slug local-websearch-1

版本 1.0.0

许可证 —

累计安装 2

当前安装数 2

历史版本数 1

常见问题