Is camohiddendj/ddg-search-cli safe?
Yes. camohiddendj/ddg-search-cli is safe to install. Oathe's behavioral security audit gave the ddg-search-cli skill by camohiddendj a trust score of 95/100 with 2 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/camohiddendj/ddg-search-cli
Is camohiddendj/ddg-search-cli safe to install?
This skill is a straightforward DuckDuckGo CLI search tool with no malicious intent detected. The skill consists only of documentation (SKILL.md) and metadata (_meta.json). No executable code, prompt injection, or data exfiltration mechanisms were found. The only network connections were to GitHub for cloning and DNS for resolution - all expected during installation.
What security issues were found in camohiddendj/ddg-search-cli?
Category Scores
Findings (2)
INFO GitHub network connection during skill installation -15 ▶
The skill clone process connected to GitHub (140.82.121.4) to fetch the monorepo. This is expected behavior for skill installation.
LOW Search functionality could be combined with other skills for data gathering -10 ▶
While the skill itself is benign, a malicious actor could use the search results in conjunction with other skills to gather information about targets. This is an inherent risk of any search capability, not a specific flaw.
Should I install camohiddendj/ddg-search-cli?
Oathe's verdict for camohiddendj/ddg-search-cli is SAFE with a trust score of 95/100. Recommendation: Install.