← 返回 Skills 市场
565
总下载
0
收藏
1
当前安装
2
版本数
在 OpenClaw 中安装
/install websearch-free-skill
功能描述
Perform web searches using various search engines and APIs.
安全使用建议
This package's documentation describes Node scripts and npm dependencies (axios, mcporter) and instructs you to run 'npm install' and 'node search.js', but the registry entry only contains SKILL.md and README.md — the actual code and package.json are missing. Before installing or running anything: (1) ask the publisher for the missing source files or a link to the project repo/homepage and verify package.json and code; (2) inspect package.json and node modules for unfamiliar or high-risk packages (mcporter is uncommon); (3) avoid running npm install or executing downloaded scripts until you've reviewed them; (4) if you must test, do so in a strict sandbox or ephemeral environment with no sensitive data or credentials available. The mismatch between claimed behavior and the provided files is the reason this is flagged as suspicious.
功能分析
Type: OpenClaw Skill
Name: websearch-free-skill
Version: 0.1.1
The skill provides legitimate web search and content extraction capabilities using the Jina Reader API (r.jina.ai) and Exa search engine via the mcporter framework. The implementation in search.js and exasearch.js is transparent, lacks obfuscation, and contains no indicators of data exfiltration, unauthorized execution, or malicious prompt injection.
能力评估
Purpose & Capability
Name/description match the claimed capability (web search and page reading) and the required binaries (node, npm) are consistent with a Node.js implementation — that part is coherent. However, the skill documentation lists runtime scripts (search.js, exasearch.js), a package.json/dependencies (axios, mcporter) and an npm install step, but the asset manifest contains only README.md and SKILL.md (no code files, no package.json). Requesting Node/npm without shipping the code or a package.json is disproportionate and incoherent.
Instruction Scope
SKILL.md instructs the agent/operator to run node ./search.js and node ./exasearch.js to fetch arbitrary web URLs and query a search provider (Jina Reader API and Exa via mcporter). Fetching external URLs is expected for a websearch skill, but the instructions also direct automatic dependency installation via npm and call out the third-party 'mcporter' integration. Because the actual script files are not present in the package, the instructions are incomplete and grant broad discretion (install and run arbitrary npm packages) that is outside the provided artifact.
Install Mechanism
No install spec is provided in the registry (instruction-only), which is the lowest-risk pattern — but SKILL.md explicitly tells users to run 'npm install' and lists dependencies. That mismatch is concerning: the skill asks to install packages at runtime even though no package.json or code is included. Installing arbitrary npm dependencies (including 'mcporter') without a vetted source increases risk.
Credentials
The skill declares no required environment variables, no credentials, and no config paths. For a websearch/URL-reading skill this is proportionate. There is no evidence the skill requests unrelated secrets.
Persistence & Privilege
Flags show always: false and normal autonomous invocation settings. The skill does not request permanent presence or elevated agent-wide privileges.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install websearch-free-skill - 安装完成后，直接呼叫该 Skill 的名称或使用
/websearch-free-skill触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.1
**Major breaking change: All core source files removed; SKILL.md now includes only documentation and sample code.**
- Removed main logic files: ReadResult.js, search.js, exasearch.js, package.json, and config/mcporter.json.
- SKILL.md updated to embed sample code and keep documentation only; no executable scripts included.
- Usage instructions and error handling sections remain as reference.
- Skill now serves as a documentation/sample reference rather than a working implementation.
v0.1.0
- Initial release of websearch skill for performing web searches without needing API keys for basic usage.
- Supports extracting content from any web page URL and performing keyword-based searches with customizable result limits.
- Automatic dependency installation via npm; requires Node.js v22+.
- Provides detailed error handling for missing parameters, invalid values, network issues, and HTTP errors.
- Utilizes Jina Reader API for content extraction and Exa API (via mcporter) for search functionality.
元数据
常见问题
Websearch 是什么？
Perform web searches using various search engines and APIs. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 565 次。
如何安装 Websearch？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install websearch-free-skill」即可一键安装，无需额外配置。
Websearch 是免费的吗？
是的，Websearch 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Websearch 支持哪些平台？
Websearch 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Websearch？
由 Rory（@roryyu）开发并维护，当前版本 v0.1.1。
推荐 Skills