freeUnlimited-websearch

Warn

Audited by Socket on Feb 26, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

This skill is consistent with its stated purpose: it delegates web searching to the ddgs Python package and returns search results. There is no explicit malicious behavior in the supplied documentation. The primary supply-chain risk is the installation of the third-party ddgs package from PyPI and the placeholder git clone instruction (which could lead users to clone untrusted forks). Best practice before enabling: review the actual search.py and the ddgs package source code (and pin a vetted ddgs release or vendor the dependency) and use a trusted repository URL. Overall risk is low-to-moderate due to standard supply-chain concerns rather than any explicit malicious functionality.

Confidence: 80%Severity: 75%
Audit Metadata
Analyzed At
Feb 26, 2026, 03:23 PM
Package URL
pkg:socket/skills-sh/LNGU%2Fopenclaw-skill-freeUnlimited-websearch%2Ffreeunlimited-websearch%2F@3db7656c49b5f3f272f5f987679488f4540f27f8