📦 webserp — 并行多引擎搜索
v0.1.4同时调用7大搜索引擎并模拟真实浏览器，秒级返回最新网页、新闻与文档，为AI提供实时全网情报。
3· 1.0k·10 当前·10 累计
by 下载技能包
最后更新
2026/2/26
安全扫描
OpenClaw
可疑
medium confidenceThe skill's functionality (parallel web scraping with browser impersonation) matches its description, but it asks you to pip-install an unverified package from an unknown source and includes scraping behavior that raises supply-chain, ToS, and privacy concerns.
评估建议
This skill's behavior (web scraping with browser impersonation) matches its description, but its provenance is unknown: SKILL.md tells you to 'pip install webserp' while the registry provides no homepage or source repo. Before installing, verify the PyPI package name and author, inspect the package source (or the project repo) for unexpected behavior, and prefer installing/trying it inside an isolated environment (container or VM). Be aware: scraping with browser impersonation can violate search...详细分析 ▾
✓ 用途与能力
Name/description align with the instructions: a metasearch CLI that scrapes seven engines and uses browser impersonation. No unrelated env vars, binaries, or config paths are requested; the capability requested (scraping/search) fits the stated purpose.
ℹ 指令范围
SKILL.md only instructs network queries to public search engines and provides CLI usage. It explicitly recommends browser impersonation (curl_cffi) and supports proxies. It does not ask for reading local files or unrelated secrets, but the scraping/impersonation behavior can be used to evade blocks and may violate search engines' terms of service or privacy expectations.
⚠ 安装机制
There is no registry install spec; the README tells users to 'pip install webserp'. Installing a PyPI package executes third-party code and can run arbitrary install/runtime code. The skill metadata provides no homepage, source repo, or package origin to verify the package or its owner — this is a supply-chain risk.
✓ 凭证需求
No credentials, env vars, or config paths are required, which is proportionate. The optional --proxy flag is reasonable for network routing but could be used to exfiltrate traffic if misused.
✓ 持久化与权限
The skill is not always-enabled and is user-invocable only. The only persistent effect would be installing the pip package into the Python environment, which is expected but means code will persist on disk until uninstalled.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.1.42026/2/21
- Removed Bing from the list of supported search engines (now searches 7 engines instead of 8). - Documentation updated to reflect only Google, DuckDuckGo, Brave, Yahoo, Mojeek, Startpage, and Presearch as available engines. - Usage and example commands adjusted for the new engine list.
● 无害
安装命令
点击复制官方npx clawhub@latest install webserp
镜像加速npx clawhub@latest install webserp --registry https://cn.longxiaskill.com