← 返回 Skills 市场
mryee2023

yee-brave-search

作者 mryee2023 · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
292
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install yee-brave-search
功能描述
A custom tool for web searching using Brave Search API.
安全使用建议
This skill appears to implement a straightforward Brave Search client, but the package metadata failing to declare the BRAVE_API_KEY requirement is a notable inconsistency. Before installing: (1) verify the skill source/owner or request an authoritative homepage/repo; (2) review the included brave_search.py (which you already have) to confirm it only calls Brave's API (it does); (3) only provide a dedicated Brave API key with least privilege, and consider using an isolated environment; (4) ask the publisher to update the registry metadata to declare BRAVE_API_KEY so automated checks and users aren't misled. If you can't verify the source, avoid installing or run it in a sandbox and rotate the API key after testing.
功能分析
Type: OpenClaw Skill Name: yee-brave-search Version: 1.0.0 The skill is a legitimate implementation of a web search tool using the Brave Search API. The Python script (brave_search.py) uses standard libraries to perform authenticated HTTP requests to the official Brave API endpoint and contains no evidence of data exfiltration, obfuscation, or malicious execution logic.
能力评估
Purpose & Capability
Name, description, SKILL.md, and brave_search.py all describe and implement a Brave Search API client — that part is coherent. However, the registry metadata lists no required environment variables or primary credential while the SKILL.md and the script both require BRAVE_API_KEY. This mismatch between declared requirements and actual needs is a red flag for incomplete or inaccurate metadata.
Instruction Scope
The SKILL.md instructs placing the files in skills/, making the script executable, and setting BRAVE_API_KEY. The script only constructs an HTTPS request to Brave's official API endpoint and prints JSON results. There are no instructions to read unrelated files, network endpoints beyond Brave Search, or to exfiltrate additional data.
Install Mechanism
No install spec (instruction-only), and no external downloads or archives. A small Python script is included; nothing is being fetched from arbitrary URLs or installed automatically. This is low-risk from an install mechanism perspective.
Credentials
The code reads a single environment variable BRAVE_API_KEY and uses it only as the X-Subscription-Token header for Brave Search API calls — that is proportionate for the stated purpose. The concern is that the registry metadata does not declare this required credential (Required env vars: none, Primary credential: none), which could mislead users and automated systems about what secrets the skill needs.
Persistence & Privilege
always is false and the skill is user-invocable; it does not request elevated or persistent system privileges and does not modify other skill configurations. Autonomous invocation is allowed by default but is not combined here with broad credentials or other concerning behavior.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install yee-brave-search
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /yee-brave-search 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release of Brave Search Custom Skill. - Provides web search functionality via the Brave Search API. - Simple setup instructions for installation and API key configuration. - Requires Python 3. - Designed for easy integration with OpenClaw agents.
元数据
Slug yee-brave-search
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

yee-brave-search 是什么?

A custom tool for web searching using Brave Search API. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 292 次。

如何安装 yee-brave-search?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install yee-brave-search」即可一键安装,无需额外配置。

yee-brave-search 是免费的吗?

是的,yee-brave-search 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

yee-brave-search 支持哪些平台?

yee-brave-search 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 yee-brave-search?

由 mryee2023(@mryee2023)开发并维护,当前版本 v1.0.0。

💬 留言讨论