📦 Free Web Search Ultimate — 实时搜索
v11.0.0面向大模型的通用搜索优先知识获取插件，支持 MCP 或 CLI 实时联网搜索与深度页面浏览，零成本、隐私优先，可快速获取最新信息。
0· 184·0 当前·0 累计
by 安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This skill's behavior and instructions match its description, but it tells you to pip install code directly from an external GitHub repository and to run a local MCP command. Before installing: inspect the referenced GitHub repository (source code, recent commits, maintainer reputation), check whether the package is published on a trusted index (PyPI) or signed releases, and review what the free-web-search-mcp binary does (network access, ports opened, data logged/transmitted). If you decide to ...详细分析 ▾
✓ 用途与能力
Name, description, and runtime instructions align: the skill tells agents to run search-web and browse-page and to prefer live web search. Declared supported integrations and required Python packages (beautifulsoup4, lxml, ddgs, mcp) are consistent with a web‑search/browsing tool.
ℹ 指令范围
The SKILL.md stays on task (search then optionally browse full pages) and does not ask the agent to read unrelated local files or transmit unrelated data. It does, however, instruct users to add an MCP server entry to claude_desktop_config.json (i.e., modify a local app config) and to install/run a local command (free-web-search-mcp) that would be provided by the external package — this expands the scope from purely in‑agent instructions to running a third‑party local service.
⚠ 安装机制
Although the registry lists no install spec, the SKILL.md explicitly instructs users to pip install the package from a GitHub repository (git+https://github.com/wd041216-bit/free-web-search-ultimate.git). Installing arbitrary code from an external GitHub repo (rather than a vetted package on a trusted index or a signed release) is a supply‑chain risk: the installed package will place a binary/command (free-web-search-mcp) on the system and may run services or arbitrary code.
✓ 凭证需求
The skill requests no environment variables, no credentials, and no config paths in the registry metadata. The requested Python deps and mcp tooling are reasonable for a web‑search/browsing tool and are proportionate to the stated functionality.
ℹ 持久化与权限
The skill is not always-enabled and uses default autonomous invocation rules. The notable point is that the documentation directs installation of a local MCP server/command (free-web-search-mcp) which, once installed, could run a local service (listening ports/processes). Autonomous invocation combined with installing a third‑party local server increases risk if that server has broad privileges or network behavior.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv11.0.02026/3/18
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install free-web-search-ultimate
镜像加速npx clawhub@latest install free-web-search-ultimate --registry https://cn.longxiaskill.com镜像同步中