📦 Web Search Plus — 增强型网页搜索
v2.9.3具有智能自动路由的统一搜索技能。使用多信号分析自动选择 Serper（Google）、Tavily（研究）、Querit 等搜索源。
95· 2.0万·144 当前·155 累计
by 下载技能包
最后更新
2026/4/20
安全扫描
OpenClaw
安全
high confidenceThe skill appears to do what it says (multi-provider web search with auto-routing); its code and runtime instructions are internally consistent, but you should review local .env/.cache use and the SearXNG auto-detection behavior before enabling it in sensitive environments.
评估建议
This skill is internally coherent for its stated purpose, but take these precautions before installing/using it:
- Review any .env file placed in the skill folder; the scripts will autoload it into environment variables. Only store API keys you trust there. Remove or relocate unrelated secrets.
- Be aware that SearXNG auto-detection will attempt to contact local addresses (127.0.0.1 or Docker gateway 172.17.0.1) if no SEARXNG_INSTANCE_URL is set; if you run the agent in environments with sensit...详细分析 ▾
ℹ 用途与能力
The code, docs, and runtime instructions align with a multi-provider search aggregator: it expects optional API keys for listed providers, performs routing logic, and caches results. The only noteworthy design choice is automatic SearXNG auto-detection which sets SEARXNG_INSTANCE_URL to Docker-host addresses (172.17.0.1) or 127.0.0.1 when no URL is provided — this is coherent for discovering a local self-hosted instance but means the skill may attempt to contact local network endpoints.
ℹ 指令范围
SKILL.md instructs running scripts/setup.py and scripts/search.py which will read/load a .env file, access environment variables, make network calls to external provider APIs (and to local SearXNG instances if configured/auto-detected), and write cache files under .cache/. This behavior matches the described purpose but you should expect network probing and local file reads/writes during setup and normal use.
✓ 安装机制
No install spec / no remote downloads. The skill is delivered as scripts and docs and runs with python3/bash. It writes cache files locally but does not fetch or execute code from arbitrary external URLs during install.
ℹ 凭证需求
No required credentials are declared by the registry; SKILL.md/documentation lists multiple optional provider API keys (SERPER_API_KEY, TAVILY_API_KEY, EXA_API_KEY, YOU_API_KEY, SEARXNG_INSTANCE_URL, QUERIT_API_KEY, KILOCODE_API_KEY). Requesting API keys for each named provider is proportionate. One implementation detail: scripts/search.py auto-loads a .env file from the skill directory into the process environment if present — be cautious that any secrets placed in that .env file will be read and used.
✓ 持久化与权限
The skill does local persistence only (cache files and provider_health.json in a .cache directory under the skill). It does not request elevated privileges or modify other skills. always:false and normal autonomous invocation settings are used.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv2.9.32026/1/21
- Added Docker environment detection script (`scripts/docker_detect.py`) to improve environment awareness. - Updated package metadata and documentation for the new version (2.9.3). - Minor documentation and metadata improvements across files.
● 无害
安装命令
点击复制官方npx clawhub@latest install web-search-plus
镜像加速npx clawhub@latest install web-search-plus --registry https://cn.longxiaskill.com