Skills/ClawHub/web-search-plus

web-search-plus@1.0.0

VERIFIED· install only

Publisher claims: "Multi-provider web search and URL content extraction with intelligent auto-routing, freshness filters, locale awareness, caching, and privacy options across..." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher seanford · publishing for 248 daysInstalls 508Last detonated 2d ago
$clawhub install web-search-plus
WatchReport an issue

Coverage

Install scripts ran; no agent task scenario for this bundle.
Tested
install scripts, with decoy credentials in place · second launch with the clock 45 days ahead · every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios; install scripts ran; no agent task scenario for this bundle) on 2026-11-12 and scored it 82/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.1sprocessexited 1: EOFError: EOF when reading a line
0.1sprocessscript backend runs setup only
0.1sprocessscript backend runs setup only
0.1sprocesssecond launch, clock +45 days, CI unset
0.1sprocessexited 1: EOFError: EOF when reading a line

Static findings

MEDIUM
Access to sensitive file pathstests/test_security.py:65 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesfor url in ("ftp://example.com/file", "file:///etc/passwd", "gopher://example.com"):Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
HTTP URL with a raw public IP addresstests/test_v33_plugin_sync.py:286 · HTTP URL with a raw public IP address — a hard-coded destination that domain-based monitoring cannot nameurl_security.validate_outbound_url("https://100.64.0.1/x")Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
LOW
URL to a private-network addressscripts/docker_detect.py:35 · URL to a private-network address — a LAN or development target- http://172.17.0.1:8080 if running in DockerFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
LOW
URL to a private-network addresstests/test_security.py:102 · URL to a private-network address — a LAN or development targeturl_security.validate_outbound_url("http://192.168.1.10/status", allow_private=True),Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
HIGH
Access to sensitive file pathsscripts/extract.py:45 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesenv_paths = [Path(__file__).parent.parent / ".env", Path(__file__).parent / ".env"]Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/search.py:331 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesPath(__file__).parent.parent / ".env",Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
LOW
URL to a private-network addressscripts/docker_detect.py:39 · URL to a private-network address — a LAN or development targetreturn "http://172.17.0.1:8080"Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
LOW
URL to a private-network addresstests/test_security.py:103 · URL to a private-network address — a LAN or development target"http://192.168.1.10/status",Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
HIGH
Access to sensitive file pathsscripts/search.py:332 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesPath(__file__).parent / ".env",Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:203 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- `.env.example` documents supported env varsFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/search.py:473 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesPriority: config.json > .env > environment variableFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/search.py:329 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files"""Load .env files from the skill root and legacy script-local path if present."""Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathstest-auto-routing.sh:6 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# Load from environment or .env fileFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathstest-auto-routing.sh:13 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesecho "Error: SERPER_API_KEY not set. Copy .env.example to .env and add your keys."Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/search.py:326 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# Auto-load .env from skill directory (if exists)Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Stripe-like API key pattern detectedtests/test_security.py:172 · Stripe-like API key pattern detected — possible hardcoded or harvested keySECRET = "sk-test-supersecret-12345"Fix: Never read or enumerate credential locations; accept a documented environment variable instead.
AST03
HIGH
Access to sensitive file pathsSKILL.md:67 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filescp .env.example .envFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
URL using a raw public IP addresstests/test_v33_plugin_sync.py:286 · URL using a raw public IP address — may bypass domain-based filteringurl_security.validate_outbound_url("https://100.64.0.1/x")Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
HIGH
Access to sensitive file pathstest-auto-routing.sh:8 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filessource .envFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathspackage.json:60 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files".env.example",Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathstest-auto-routing.sh:7 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesif [ -f .env ]; thenFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
LOW
URL to a private-network addresstests/test_security.py:119 · URL to a private-network address — a LAN or development targetpayload = {"provider": "firecrawl", "results": [{"url": "http://192.168.0.2/x", "title": "t", "content": "c", "raw_content": "c", "provider": "firecrawl"}]}Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
LOW
URL to a private-network addresstests/test_security.py:108 · URL to a private-network address — a LAN or development target"http://10.0.0.9/dash",Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
LOW
URL to a private-network addresstests/test_security.py:107 · URL to a private-network address — a LAN or development targeturl_security.validate_outbound_url("http://10.0.0.9/dash"),Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07

Cost to the agent

Instructions loaded
≈3,897 tok
1 file · 24 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

web-search-plus@1.0.0 safety verdict: Verified (install only) — KillerSkills