Skills/ClawHub/star-search

star-search@20.42.1

CAUTION· static only

Publisher claims: "Use when asked to search the web, find online information, research topics, get news, look up Chinese content, or check finance / tech news. **v20.42 - LangChain + Dify + 5 分钟安装体验**: 新增 LangChain Tool 适配器 (`integrations/langchain/star_search_tool.py`) + Dify plugin (`integrations/dify/manifest.yaml`), 一键安装脚本 `install.sh`, `.env.example` 模板, 5 分钟快速开始. **v20.41 基础**: English coverage + open scholarly sources (pure-English queries auto-route to Bing HTTP backend; OpenAlex + CrossRef merge). 16 plus engines, intent understanding, observable per-call metrics. The public service exposes standard MCP (4 tools) plus JSON-RPC and SSE. v20 series highlights: sub-second SSE streaming, multi-turn dialog, 4 output formats, Prometheus monitoring, semantic search, AI orchestration layer (intent classification, entity card, cross-source verification), bot-protection workarounds, and a 4-stage end-to-end pipeline that defaults to LLM answer + auto-fetched snippets. 16 plus engines, intent understanding, and observable per-call metrics." Observed in sandbox: static analysis only — behavior not yet observed.

Registry ClawHubPublisher muchenhengxin · publishing for 148 daysInstalls 2,620Last detonated 7d ago
What would fix thisWatchDispute verdict

Coverage

Static only; nothing was run yet.

The label rests on the code, the instruction files and the publisher. The honeypot run replaces this verdict when it completes.

Is [email protected] safe to install?

KillerSkills analysed it statically (a sandbox run is pending) on 2026-11-07 and scored it 51/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Access to sensitive file paths; Access to sensitive file paths; Privileged sudo command. Summary: static analysis only — behavior not yet observed.

Behavior trace

Queued for honeypot run · static analysis only
t+CategoryObserved action

This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.

Static findings

MEDIUM
Python subprocess execution detectedscripts/star_search.py:20 · Python subprocess execution detectedtab_resp = subprocess.run([Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
HIGH
Access to sensitive file pathsSKILL.md:3 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesdescription: "Use when asked to search the web, find online information, research topics, get news, look up Chinese content, or check finance / tech news. **v20.42 - LangChain + Dify + 5 分钟安装体验**: 新增 Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/answer.py:27 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# 2) server .envFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Privileged sudo commandinstall.sh:70 · Privileged sudo command — agent may execute with elevated privilegessudo cp deploy/star-search.service /etc/systemd/system/Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandinstall.sh:72 · Privileged sudo command — agent may execute with elevated privilegessudo systemctl enable star-searchFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Access to sensitive file pathsSKILL.md:340 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files`super_brain.py` 读 `<install-dir>/.env` (server 路径), mac 上不存在 → LLM_API_KEY 空 → `_call_llm` 静默失败 → 全 fallback info。**永远在 server 上跑 test_intent_108.py**, mac 上跑等于浪费 LLM quota。Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Privileged sudo commandinstall.sh:75 · Privileged sudo command — agent may execute with elevated privilegesecho " 查看状态: sudo systemctl status star-search"Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Access to sensitive file pathsinstall.sh:34 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesif [ ! -f .env ]; thenFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsinstall.sh:36 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesecho "✓ 已创建 .env 文件 (请编辑填入你的 LLM API key)"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:351 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files`~/.ssh/config` 加 vm-ubuntu alias (用 <ssh-key>) 可避免每次输密钥。Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsinstall.sh:35 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filescp .env.example .envFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsinstall.sh:31 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# 3. 配置 .envFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Privileged sudo commandinstall.sh:71 · Privileged sudo command — agent may execute with elevated privilegessudo systemctl daemon-reloadFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandSKILL.md:348 · Privileged sudo command — agent may execute with elevated privileges# 这样 scp 直接覆盖即可, 不需要 sudo 步骤Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandSKILL.md:347 · Privileged sudo command — agent may execute with elevated privileges# 推荐: 把 server 文件属主改成 ubuntu 用户 (sudo chown -R ubuntu:ubuntu <install-dir>),Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandinstall.sh:73 · Privileged sudo command — agent may execute with elevated privilegessudo systemctl start star-searchFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Python subprocess execution detectedscripts/star_search.py:45 · Python subprocess execution detectedsnap_resp = subprocess.run([Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/academic_code.py:15 · Python subprocess execution detectedr = subprocess.run(cmd, capture_output=True, timeout=timeout+1)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
HIGH
Access to sensitive file pathsscripts/entity_card.py:28 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files_env_path = Path('/home/ubuntu/star-search/.env')Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Python subprocess execution detectedscripts/deep_research.py:72 · Python subprocess execution detectedproc = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/multimodal.py:36 · Python subprocess execution detectedresult_tsv = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
HIGH
Access to sensitive file pathsscripts/query_rewrite.py:22 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files_env_path = Path('/home/ubuntu/star-search/.env')Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
File permission modification commandSKILL.md:347 · File permission modification command — agent changes file ownership/permissions# 推荐: 把 server 文件属主改成 ubuntu 用户 (sudo chown -R ubuntu:ubuntu <install-dir>),Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
Process kill commandSKILL.md:411 · Process kill command — agent can terminate processes`lsof <install-dir>/scripts/.search_cache.sqlite` → 找到僵尸 PID → `kill -9`Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Access to sensitive file pathsscripts/super_brain.py:26 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files_env_path = Path('/home/ubuntu/star-search/.env')Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Python subprocess execution detectedscripts/web_search.py:41 · Python subprocess execution detectedresult = subprocess.run(['curl', '-s', '--max-time', '15', url],Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/web_search.py:17 · Python subprocess execution detectedresult = subprocess.run(['curl', '-s', '--max-time', '15', url],Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/multimodal.py:30 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
HIGH
Access to sensitive file pathsscripts/deep_research.py:21 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# 兼容从 /home/ubuntu/star-search/.env 读Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Python subprocess execution detectedscripts/multimodal.py:125 · Python subprocess execution detectedproc = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
HIGH
Access to sensitive file pathsscripts/deep_research.py:22 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files_env_path = Path('/home/ubuntu/star-search/.env')Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Python subprocess execution detectedscripts/fetch_content.py:77 · Python subprocess execution detectedr = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
HIGH
Access to sensitive file pathsscripts/discover.py:147 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesenv_path = '/home/ubuntu/star-search/.env'Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/discover_runner.py:15 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesenv_path = '/home/ubuntu/star-search/.env'Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/answer.py:23 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# 2) /home/ubuntu/star-search/.env (server-specific)Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/answer.py:28 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files_env_path = os.path.expanduser("~/star-search/.env")Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05

Cost to the agent

Instructions loaded
≈6,602 tok
1 file · 50 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

29 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Unclaimed publisher≈ +8 on the totalClaim muchenhengxin: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  2. Access to sensitive file paths≈ +4 on the totalStop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
  3. Privileged sudo command≈ +4 on the totalBuild commands from fixed arguments; do not interpolate untrusted strings into a shell.
  4. Python subprocess execution detected≈ +2 on the totalBuild commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
  5. File permission modification command≈ +2 on the totalRequest the narrowest permission that works; replace wildcards with the exact paths or hosts.
  6. Process kill command≈ +2 on the totalBuild commands from fixed arguments; do not interpolate untrusted strings into a shell.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim muchenhengxinPropose a patch to the maintainer