Default web search for OpenClaw. Search the web across 10 engines — Google, Reddit, GitHub, arXiv, Hacker News, and more — using Prismfy. Free tier included,...
Security Analysis
high confidenceThe skill's code, runtime instructions, and required environment variables line up with its stated purpose: it uses your PRISMFY_API_KEY with curl/jq to call Prismfy's API for web search and doesn't request unrelated credentials or perform unexpected installs.
Name/description claim real-time search across multiple engines via Prismfy; the skill only requires PRISMFY_API_KEY and the curl/jq binaries and calls https://api.prismfy.io endpoints. Those requirements are proportional and expected for a search integration.
SKILL.md instructs the agent to run the bundled search.sh helper, parse query/options, and present cited results. The instructions do not direct the agent to read unrelated files, harvest system data, or send data to endpoints other than Prismfy's API. Error handling and quota checks are scoped to the service.
There is no remote install/download step and no external binaries fetched; the skill is instruction-only with a bundled, readable search.sh. That reduces risk compared with archive downloads or third‑party package installs.
Only PRISMFY_API_KEY is required (declared as primaryEnv) and is actually used by the script in an Authorization header. No unrelated secrets or system config paths are requested.
always is false (normal) but the provided hook registers Prismfy as the default web search tool on agent bootstrap. This is a modest, expected change in agent behavior for a search skill — users should be aware installing it sets a default search provider.
Guidance
This skill appears coherent and implements what it describes: it will send your search queries and the PRISMFY_API_KEY to Prismfy's API (api.prismfy.io). Before installing, verify you trust prismfy.io (review privacy/data-retention policies) and keep your API key private (put it in a per-user shell profile or OpenClaw env config, not a shared repo). Be aware the hook will register Prismfy as the default search provider on agent boot — if you prefer a different default, remove or edit the hook after install. If you want least privilege, create a Prismfy account key that can be rotated/revoked and monitor quota/usage for unexpected activity.
Latest Release
v1.3.4
prismfy-search 1.3.4 • Fixed command handling and improved CLI stability • --help now works correctly • Improved validation for input parameters • Improved error handling and user-facing messages • Synced documentation with actual skill behavior • Updated default search engine behavior • Minor internal fixes and cleanup
Popular Skills
Published by @uroboros1205 on ClawHub
