Search Strategy Skill

智能搜尋策略執行器 - 自動選擇最佳搜尋工具，無需手動判斷。

Before installing: 1) Verify the skill's provenance (the repo/homepage is generic), and consider pulling the code and reviewing it locally. 2) Expect to provide API keys (Firecrawl, Tavily, Brave, platform OAuth) even though metadata doesn't list them — treat those keys as sensitive. 3) Run the skill in a sandboxed environment or with restricted network access if you plan to pass untrusted URLs (to reduce SSRF/exfiltration risk). 4) If you don't need autonomous invocation, prefer to keep the skill user-invocable only. 5) Confirm whether you trust the external CLIs (firecrawl, tavily-search, agent-reach) before installing them; inspect or install them from official sources. 6) If using browser automation, explicitly check what BROWSER_SKILL_PATH points to and whether it can execute arbitrary Node code. If you want to proceed, add the required env var declarations to your policy and avoid passing internal-only URLs or secrets as query/url inputs.

Type: OpenClaw Skill Name: search-strategy-skill Version: 1.1.0 The search-strategy skill is a legitimate utility designed to route search queries to various providers (Jina.ai, Firecrawl, Tavily, Brave, etc.) based on the task type. The shell script `scripts/search-strategy.sh` implements standard argument parsing and uses `curl` or external CLIs to fetch web content, with basic sanitization for URLs and queries. No evidence of data exfiltration, unauthorized credential access, or malicious prompt injection was found; the instructions in `SKILL.md` and `README.md` accurately describe the tool's intended logic and fallback mechanisms.