Searxng Search

Web search using SearXNG instance via MCP. Provides web search capability for agents with configurable SearXNG endpoint.

This package appears to implement a straightforward SearxNG search wrapper, but the registry metadata is missing required binaries and the SEARXNG_URL environment variable that the code expects. Before installing: - Confirm the SEARXNG_URL you will use and that it points to a trusted SearxNG instance (your search queries will be sent to that endpoint). - Verify locally that the included files (mcp-server.py and searxng_search.sh) are the code you expect; they are readable and do not contain obfuscated or hidden network endpoints. - If you require metadata accuracy, ask the publisher to update the registry entry to declare required binaries (python3, curl, jq) and the SEARXNG_URL env var. - Run the server/script in a sandbox or with restricted network access if you are unsure about exposing queries externally. - If you plan to use this in automated agent runs, ensure the MCP integration and SEARXNG_URL do not inadvertently expose private or sensitive data to the configured SearxNG instance. If the metadata mismatch was accidental, the skill itself is coherent with its stated purpose; if the omission was intentional, treat it as a red flag and avoid installing until clarified.

Type: OpenClaw Skill Name: searxng-search-2 Version: 0.1.2 The OpenClaw AgentSkills bundle for SearXNG search appears benign. Both `searxng_search.sh` and `mcp-server.py` correctly URL-encode user queries using `jq -sRr @uri` and `urllib.parse.quote` respectively, preventing injection vulnerabilities when interacting with the configured SearXNG instance. The `SEARXNG_URL` is an environment variable, requiring explicit user configuration, and there is no evidence of hardcoded malicious endpoints, data exfiltration, unauthorized execution, or prompt injection attempts in `SKILL.md`. The skill's functionality is clearly aligned with its stated purpose of providing web search.