Advanced web search with precise date filtering and content type selection. Use when you need academic papers, GitHub repositories, research content, or spec...
Security Analysis
high confidenceThe skill's code, instructions, and credential requirements are consistent with an API-backed web search wrapper that calls the Claw0x gateway using a single CLAW0X_API_KEY; nothing in the files suggests unrelated or excessive privileges.
Name/description (advanced web search) match the code and SKILL.md which call the Claw0x Gateway API. The single required credential (CLAW0X_API_KEY) and the documented endpoint (https://api.claw0x.com/v1/call) are coherent with the stated purpose.
SKILL.md instructs the agent/user to set CLAW0X_API_KEY and shows example calls. The runtime instructions and handler.ts only reference that env var and a network call to Claw0x; they do not instruct reading unrelated files, scanning local data, or sending data to unexpected endpoints.
No install spec is provided (instruction-only), and the single TypeScript handler is a small client wrapper. No downloads, package installs, or archive extraction are present. The only runtime effect is an outbound API call to api.claw0x.com, which is expected for this skill.
Only CLAW0X_API_KEY is required, which is proportional to a gateway API client. The README suggests storing it in ~/.openclaw/.env but the code reads process.env.CLAW0X_API_KEY; no other secrets or unrelated credentials are requested.
always:false and default agent invocation are used. The skill does not request permanent/system-wide privileges or modify other skills. Autonomous invocation is allowed (platform default) but is not combined with other concerning factors.
Guidance
This skill appears to be a thin client that forwards your query to Claw0x's API using the CLAW0X_API_KEY. Before installing: confirm you trust claw0x.com (the API endpoint and billing model will be tied to that provider), keep your CLAW0X_API_KEY secret and scoped/rotated if possible, and monitor usage/billing since calls are billable. If you want extra assurance, review the public repository referenced in SKILL.md to validate authorship and examine any upstream code. Finally, remember queries and returned content will transit the Claw0x service—do not send highly sensitive secrets in search queries.
Latest Release
v1.0.0
Exa Search 1.0.0 — Major Upgrade & Claw0x Integration - Now powered by Claw0x Gateway API: unified billing and simple API key setup - Adds support for advanced search options: precise date filtering, content type selection (papers, GitHub, news, PDFs), neural vs. keyword search - Updates documentation for new API usage, real-world scenarios, and integration recipes (OpenClaw, LangChain, custom agents) - Exa API key requirement removed; only Claw0x API key needed - Local Node script removed; all calls now routed via Claw0x platform - Full pricing transparency & failure cost protections introduced
More by @kennyzir
Published by @kennyzir on ClawHub
