← 返回 Skills 市场
Smart Search Fallback
作者
tuobadaidai
· GitHub ↗
· v1.0.0
· MIT-0
90
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install smart-search-fallback
功能描述
统一搜索入口 — 智能路由 + 自动降级。根据查询场景自动选择最优工具(Serper/Google、OpenCLI、多引擎聚合、深度爬虫、远程浏览器、直接抓取等),任一工具失败时自动降级到下一优先级。触发条件:用户要求搜索信息、查找网页、获取最新资讯、验证事实、搜索中英文内容、或任何需要联网获取信息的场景。当搜索...
安全使用建议
This skill appears to do exactly what it says: orchestrate multiple search tools and fall back when one fails. Before installing, verify that you have the optional backends you plan to use (opencli, crawl4ai Python package, firecrawl binary) or accept those fallbacks will simply fail. Keep API keys local (as recommended) and ensure .env files in other skill directories are not shared. Note the script suppresses stderr and will hide error details (including API key errors) from users — useful for a clean UX but reduces transparency when debugging. Also be aware that the skill actively fetches web content via those tools, so standard risks of remote content apply (malicious pages, large downloads); ensure your runtime sandbox/network policies match your risk tolerance.
功能分析
Type: OpenClaw Skill
Name: smart-search-fallback
Version: 1.0.0
The skill implements a search fallback mechanism but contains a shell injection vulnerability in `scripts/fallback-search.sh`. Specifically, the `$QUERY` variable is expanded directly into a Python script executed via `python3 -c` in the T3 fallback block, which allows for arbitrary Python code execution if a user provides a crafted search query. While the intent appears to be functional (improving search reliability), the lack of input sanitization in the shell script poses a significant security risk.
能力标签
能力评估
Purpose & Capability
The skill declares itself as a search/fallback router and only requires python3, bash, and opencli — which matches the commands shown. It references other tools (crawl4ai, firecrawl, web-search-plus, web_fetch) that are optional fallbacks; those are not listed as required binaries, which is acceptable for optional backends but worth noting because some fallback steps will simply fail if those tools/packages are absent.
Instruction Scope
SKILL.md and the script only call other search tools and perform web fetches — operations consistent with the stated purpose. One behavioral note: the script and examples suppress stderr (2>/dev/null) and the doc explicitly instructs 'do not report API Key errors to the user', which intentionally hides error details; this is coherent with a user-friendly fallback strategy but reduces transparency and could mask operational problems. The instructions do not read arbitrary user files or exfiltrate data beyond normal web queries.
Install Mechanism
Instruction-only skill with a small helper script and no install spec — low surface area. Nothing in the package downloads or writes arbitrary code to disk during installation.
Credentials
No required environment variables; two API keys (SERPER_API_KEY, FIRECRAWL_API_KEY) are marked optional and only needed for specific backends. The SKILL.md references storing keys in per-skill .env files (e.g., skills/web-search-plus/.env). This is proportionate to the described function, but be aware the skill assumes those other skill directories and local .env files hold credentials — if those files are present and mismanaged, they could be exposed by other tooling.
Persistence & Privilege
always:false and no indication the skill modifies agent/system configs or requests permanent presence. The skill does not ask to auto-enable itself beyond normal invocation behavior.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install smart-search-fallback - 安装完成后,直接呼叫该 Skill 的名称或使用
/smart-search-fallback触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
初始版本:统一搜索入口 + T1-T7 自动降级链
元数据
常见问题
Smart Search Fallback 是什么?
统一搜索入口 — 智能路由 + 自动降级。根据查询场景自动选择最优工具(Serper/Google、OpenCLI、多引擎聚合、深度爬虫、远程浏览器、直接抓取等),任一工具失败时自动降级到下一优先级。触发条件:用户要求搜索信息、查找网页、获取最新资讯、验证事实、搜索中英文内容、或任何需要联网获取信息的场景。当搜索... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 90 次。
如何安装 Smart Search Fallback?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install smart-search-fallback」即可一键安装,无需额外配置。
Smart Search Fallback 是免费的吗?
是的,Smart Search Fallback 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Smart Search Fallback 支持哪些平台?
Smart Search Fallback 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Smart Search Fallback?
由 tuobadaidai(@tuobadaidai)开发并维护,当前版本 v1.0.0。
推荐 Skills