Instantly find the best AI agent skills, tools, and capabilities from across the entire web.
Security Analysis
medium confidenceThe skill is internally coherent for a search wrapper: it runs a local Python script that forwards user queries to a publisher-controlled external search API — avoid sending secrets or PII because queries are transmitted off-host.
The name/description, SKILL.md, and included script all match: a python3 script performs full-text searches by forwarding queries to an external search API. There are no unrelated binaries, env vars, or config paths requested.
SKILL.md explicitly says queries are forwarded to an external API; the script confirms this by making an HTTP GET to https://skillsearch-api.hagen-hoferichter.workers.dev/search. The instructions do not read local files or environment variables, but they do transmit whatever the user types to the publisher's endpoint (so queries may be logged).
There is no install spec and only a small included Python script; nothing is downloaded or executed from arbitrary URLs during install. Required runtime is only python3.
The skill requests no environment variables or credentials (proportionate). However, because it transmits raw queries to a publisher-managed endpoint, users should avoid embedding API keys, passwords, or PII in queries.
The skill does not request persistent presence (always:false), does not modify other skills or system settings, and has no install-time side effects. Autonomous invocation is allowed by default but not exceptional here.
Guidance
This skill is coherent with its stated purpose, but it forwards whatever you type to an external, publisher-run API (https://skillsearch-api.hagen-hoferichter.workers.dev). Before installing: (1) do not include secrets, API keys, passwords, or PII in queries; (2) test with harmless sample queries first; (3) if privacy is a concern, ask the publisher for a privacy/provenance statement or consider a self-hosted alternative; (4) you can review the included scripts (scripts/search.py) yourself — it only performs an HTTP GET and prints results — and control network access with host-based firewall rules if needed.
Latest Release
v1.0.7
- Updated version to 1.0.7 in SKILL.md. - No functional or documentation changes beyond version number update.
More by @h4gen
Published by @h4gen on ClawHub
