Taizi Brave Search

Web search and content extraction via Brave Search API. Use for searching documentation, facts, or any web content. Lightweight, no browser required.

This skill's code scrapes Brave's public search HTML and fetches page content — that matches the 'search and extract' purpose. However, SKILL.md incorrectly says it uses the Brave Search API and needs BRAVE_API_KEY while the code never reads an API key. Do not provide any unrelated secrets (API keys) to this skill. If you plan to install/run it: (1) verify the source/trustworthiness (the registry owner and _meta.json disagree), (2) review the included code (you already have) and confirm you accept that it performs network requests to arbitrary URLs, (3) be cautious running 'npm ci' as it will install dependencies from npm, and (4) avoid running it in environments where fetching internal or sensitive URLs could leak data. If you need a skill that uses a Brave Search API key, ask the author for an updated version that actually uses the API and documents required env vars correctly.

Type: OpenClaw Skill Name: taizi-brave-search Version: 1.0.0 The skill bundle provides legitimate web search and content extraction functionality using Brave Search and standard libraries like @mozilla/readability and jsdom. While SKILL.md claims to use the Brave Search API and requests a BRAVE_API_KEY, the implementation in search.js actually scrapes the public Brave Search web interface; however, this is a functional discrepancy rather than a security threat. There is no evidence of data exfiltration, malicious command execution, or prompt injection.