← 返回 Skills 市场
super-search
作者
runawaydevil
· GitHub ↗
· v2.0.0
465
总下载
1
收藏
5
当前安装
3
版本数
在 OpenClaw 中安装
/install super-search
功能描述
Performs simultaneous searches across Tavily, Brave, DuckDuckGo, and Google, aggregates and deduplicates results, then presents the top relevant links with s...
安全使用建议
This skill has clear mismatches between its manifest and its runtime instructions. Before installing: 1) Ask the publisher to update the registry metadata to list the required environment variables (TAVILY_API_KEY, BRAVE_SEARCH_API_KEY) and to explain how API keys are used and stored. 2) Request concrete commands or examples for DuckDuckGo/Google if those providers are part of the advertised scope. 3) Confirm whether the agent will persist any keys/config or where DEFAULT_* values are stored; never paste secrets into a public skill. 4) Consider privacy: the skill's web_fetch step retrieves full page content from top URLs and could collect personal or sensitive data — verify acceptable data handling. If the author cannot justify the mismatches or provide a trusted homepage/repository, treat the skill cautiously and avoid supplying API keys.
功能分析
Type: OpenClaw Skill
Name: super-search
Version: 2.0.0
The skill implements a search aggregator using Tavily and Brave Search APIs, but it instructs the agent to execute these searches via `curl` shell commands in `SKILL.md`. This pattern introduces a shell injection vulnerability if the agent places unsanitized user input into the command string. Furthermore, the skill utilizes `web_fetch` to retrieve full content from arbitrary third-party URLs, which is a high-risk capability that could be leveraged for SSRF or accessing malicious content, although it is plausibly needed for the stated purpose of summarizing search results.
能力评估
Purpose & Capability
The skill description claims searches across Tavily, Brave, DuckDuckGo, and Google, but the SKILL.md only provides concrete commands for Tavily and Brave (no DuckDuckGo or Google calls). Registry metadata lists no required environment variables, yet SKILL.md requires TAVILY_API_KEY and BRAVE_SEARCH_API_KEY. These mismatches indicate the declared purpose and the actual implementation are not aligned.
Instruction Scope
Runtime instructions direct the agent to run web requests (curl examples) and to use an agent tool 'web_fetch' to retrieve full content of top URLs for consolidation. Fetching full page content is reasonable for an aggregator, but it broadens scope (could pull private/embedded data). SKILL.md also references local configuration variables (DEFAULT_CITY/STATE/COUNTRY) and warns 'não expor em skill pública', which is odd for an instruction-only skill and suggests unclear handling of configuration/secret exposure.
Install Mechanism
No install spec and no code files beyond package.json and SKILL.md. Instruction-only skills are lower risk because nothing is written to disk by an installer.
Credentials
SKILL.md requires TAVILY_API_KEY and BRAVE_SEARCH_API_KEY (and suggests DEFAULT_* vars), but the registry metadata declares no required environment variables or primary credential. Requesting API keys for the two search services would be proportionate if declared; the omission in metadata is a coherence problem and prevents proper permission review. Also the note 'não expor em skill pública' for DEFAULT_* suggests uncertainty about what should be secret.
Persistence & Privilege
Skill is not always-enabled and does not request persistent/privileged installation. It is user-invocable and can be invoked autonomously by the agent (the platform default), which is normal.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install super-search - 安装完成后，直接呼叫该 Skill 的名称或使用
/super-search触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v2.0.0
Super-search 2.0.0 adds multi-language and location-aware WhatsApp-formatted search.
- Integração avançada com WhatsApp, incluindo estrutura de resposta formatada com emojis e listas.
- Busca multi-idioma automática (PT, EN, ES) com detecção dinâmica de idioma e localização.
- Novo fluxo de busca: utiliza Tavily como principal com answer, imagens e resultados detalhados; Brave Search como backup.
- Respostas consolidadas: extração de conteúdo completo dos principais links, informações consolidadas e citações de fontes.
- Gatilho atualizado: ativa ao detectar comandos como "buscar" ou "busca" em português.
- Exemplo de output e instruções detalhadas para variáveis de ambiente e uso de API keys.
v1.1.0
**Version 1.1.0 – Improved security and configuration instructions**
- Updated documentation to remove personal account details and clarify that users must configure their own API keys and accounts.
- Enhanced environment setup and configuration sections to emphasize user responsibility for secure key management.
- Revised instructions for Google (gog) usage, removing sample credentials and replacing with generic guidance.
- Incremented skill version to 1.1 to reflect these important adjustments.
v1.0.0
Super Search 1.0.0 – Initial Release
- Aggregated search across Tavily, Brave, DuckDuckGo, and Google (via gog).
- Searches run in parallel; results are deduplicated and compared for relevance.
- Users must configure API keys for Tavily and Brave.
- Output presents a consolidated list with cited sources.
- Documentation includes environment setup, API instructions, and usage examples.
元数据
常见问题
super-search 是什么？
Performs simultaneous searches across Tavily, Brave, DuckDuckGo, and Google, aggregates and deduplicates results, then presents the top relevant links with s... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 465 次。
如何安装 super-search？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install super-search」即可一键安装，无需额外配置。
super-search 是免费的吗？
是的，super-search 完全免费（开源免费），可自由下载、安装和使用。
super-search 支持哪些平台？
super-search 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 super-search？
由 runawaydevil（@runawaydevil）开发并维护，当前版本 v2.0.0。
推荐 Skills