← 返回 Skills 市场
194
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install web-search-plus-2-8-6
功能描述
Unified search skill with Intelligent Auto-Routing. Uses multi-signal analysis to automatically select between Serper (Google), Tavily (Research), Exa (Neura...
安全使用建议
This package appears to be what it claims: a Python-based multi-provider web search aggregator with auto-routing. Before installing or running it: 1) Verify the source provenance (no homepage listed and 'source: unknown' in the registry); prefer code from a known/trusted origin. 2) Review and, if needed, sanitize the .env file placed in the skill directory — the script auto-loads .env and will import those values into the process. 3) Remember that query text is cached to .cache/ by default (may include sensitive queries); set WSP_CACHE_DIR or use --no-cache if that concerns you. 4) If you plan to use Perplexity via Kilo, KILOCODE_API_KEY is required and traffic goes to api.kilo.ai; confirm you are comfortable sending queries to that gateway. 5) Inspect and run setup.py manually (not as root) to review any network tests it performs (changelog notes SSRF protections were added recently). If you need higher assurance, obtain the repo from the upstream GitHub link referenced in the docs or ask the publisher for a signed release/build before enabling the skill in production.
功能分析
Type: OpenClaw Skill
Name: web-search-plus-2-8-6
Version: 1.0.0
The web-search-plus skill is a legitimate search aggregator that routes queries across multiple providers like Serper, Tavily, and SearXNG. The code in scripts/search.py and scripts/setup.py includes proactive security measures, specifically defense-in-depth SSRF protection that validates URLs and blocks private/internal IP ranges and cloud metadata endpoints. The functionality is well-documented, aligns with the stated purpose, and shows no signs of malicious intent, data exfiltration, or unauthorized execution.
能力评估
Purpose & Capability
The name/description (multi-provider web search with auto-routing) matches what the package includes: a Python CLI, provider connectors, routing logic, and local result caching. Required binaries (python3, bash) are appropriate. Provider API keys are optional in the docs (one key suffices), which aligns with being an aggregator that can operate with a single configured provider or a self-hosted SearXNG instance.
Instruction Scope
Runtime instructions direct the agent to run scripts/setup.py and scripts/search.py and to place API keys in environment variables or config.json — all within the search skill's scope. Two operational notes: (1) the code auto-loads a .env file from the skill directory (it will set environment variables found there if not already set), and (2) results are cached to a local .cache/ directory by default, so queries (which may contain sensitive data) are written to disk. The changelog mentions SSRF protection for SearXNG setup checks; the setup wizard is present in the repo and should be reviewed before running.
Install Mechanism
No automated install spec is included (instruction-only behavior plus source files). That is lower-risk than pulling remote binaries. The skill ships Python scripts which will run locally; there are no fetched/executed archives or remote install URLs in the provided files.
Credentials
The skill requests multiple provider API keys (SERPER_API_KEY, TAVILY_API_KEY, EXA_API_KEY, YOU_API_KEY, KILOCODE_API_KEY) but marks them optional and documents that only one provider key is required. This is proportionate for an aggregator. Two practical caveats: (1) the script will auto-load .env from the skill folder (so placing other secrets there could leak them into the skill process), and (2) the cache persists queries locally (WSP_CACHE_DIR can be set to relocate it) — both are operational security considerations rather than signs of malicious behavior.
Persistence & Privilege
The skill is not set 'always: true' and does not request system-wide privileges. It writes cache files into its own .cache/ directory and reads/writes its own config; it does not modify other skills or system-wide agent settings. Autonomous invocation is enabled by default on the platform, which is normal.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install web-search-plus-2-8-6 - 安装完成后，直接呼叫该 Skill 的名称或使用
/web-search-plus-2-8-6触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
- Initial release of web-search-plus (v2.8.6): a unified web search skill with intelligent auto-routing.
- Automatically analyzes queries and selects the best provider among Serper (Google), Tavily (Research), Exa (Neural), Perplexity (AI Answers), You.com (RAG/Real-time), and SearXNG (Privacy/Self-hosted).
- Only one provider API key is required to start; supports adding more for richer results and fallback.
- Includes automatic provider fallback on rate limit, timeout, or other errors.
- Extensive documentation for setup, configuration, key management, and usage examples.
- Offers both auto-routing and manual provider selection with explanation/debug tools.
元数据
常见问题
Web Search Plus 2.8.6 是什么？
Unified search skill with Intelligent Auto-Routing. Uses multi-signal analysis to automatically select between Serper (Google), Tavily (Research), Exa (Neura... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 194 次。
如何安装 Web Search Plus 2.8.6？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install web-search-plus-2-8-6」即可一键安装，无需额外配置。
Web Search Plus 2.8.6 是免费的吗？
是的，Web Search Plus 2.8.6 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Web Search Plus 2.8.6 支持哪些平台？
Web Search Plus 2.8.6 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Web Search Plus 2.8.6？
由 marsxuc（@marsxuc）开发并维护，当前版本 v1.0.0。
推荐 Skills