多引擎全自动搜索聚合器

自动调用所有已安装搜索技能并行检索，去重交叉验证后整合排序，提供最全面、准确、实时的搜索结果。

Before installing, consider these risks and mitigations: - The aggregator will execute any 'search' skill found in your local skills directories with your user privileges. Audit the installed search skills first — a malicious or compromised skill can read files, network, and exfiltrate queries. - The tool writes the query and reads results via shared TEMP files (mes_in.json / mes_result.json). Queries are stored in plaintext in the system temp directory and could be read by other local users/processes; child scripts may also write unexpected data. Prefer running in an isolated account or VM if queries are sensitive. - The code contains inconsistent path assumptions (hardcoded Windows user path vs SKILL.md's ~/ paths) and an implicit dependency on curl.exe; it may fail or behave unexpectedly on non-Windows systems. - Parallelism uses one worker per discovered skill; if you have many skills this may exhaust resources. The use of a single global temp filename introduces race conditions and possible tampering. Recommendations: only install if you (a) inspect and trust the local search skills that will be invoked, (b) are comfortable with queries being written to the system temp directory, and (c) can run the aggregator in an isolated environment. If you plan to use it, modify the code to use per-process temp files (securely created), limit concurrency, and avoid hardcoded user paths or undocumented external binary requirements.

Type: OpenClaw Skill Name: multi-engine-auto-search Version: 1.0.3 The skill contains hardcoded absolute Windows file paths to a specific user's directory (C:\Users\86195\...) in run.py, which is highly irregular for a portable skill and suggests it was extracted from a specific environment. It also implements a broad execution pattern that automatically runs any 'run.py' or 'search.py' file found in directories matching keywords like 'search' or 'browser', which could be leveraged for lateral code execution. While the logic aligns with its stated purpose as a search aggregator, the hardcoded environment-specific paths and the use of 'curl.exe' for direct Bing scraping (cn.bing.com) warrant caution.