Search Viewer

整合Fofa、Hunter、Shodan等空间测绘平台API，辅助渗透测试信息收集和资产发现的工具。

This tool appears to be what it says (an OSINT GUI aggregator) but has several practical and security issues you should consider before installing: - Verify the source repository and review the code (Search_Viewer.py and iconhash.py) yourself or with a trusted reviewer; the package owner is not clearly established here. - The SKILL.md and _meta.json understate dependencies. Before running, inspect imports and install required libraries (shodan, mmh3, configobj, jsonpath, etc.), or run in a disposable environment (VM or container). - API keys are stored in a local config.ini in plaintext. Do not use production/privileged credentials. Use throwaway or scoped API keys where possible and restrict file permissions (chmod 600). Rotate keys after use. - The iconhash feature issues HTTP GET requests to user-supplied URLs. That can be abused to probe internal network services (SSRF-like behavior). Only query URLs you trust and consider running the app on an isolated network. - If you plan to use this for sanctioned testing, ensure you have authorization for targets and comply with legal/regulatory requirements. If you want to proceed: run the app in an isolated VM, confirm and install all actual Python dependencies found in the code, inspect network calls in the source, and avoid entering sensitive credentials until you are comfortable with the code.

Type: OpenClaw Skill Name: search-viewer Version: 4.3.0 The skill bundle is a graphical OSINT (Open Source Intelligence) aggregator tool designed to query various network mapping platforms such as Fofa, Shodan, and Hunter. Analysis of the primary logic in Search_Viewer.py and iconhash.py confirms that the code performs legitimate API requests to these services and manages configuration data locally in a config.ini file. No evidence of data exfiltration, backdoors, or malicious prompt injection was found; the tool's behavior is consistent with its stated purpose as a reconnaissance utility for security professionals.