Is clockworksquirrel/searxng-local safe?
Yes. clockworksquirrel/searxng-local is safe to install. Oathe's behavioral security audit gave the searxng-local skill by clockworksquirrel a trust score of 92/100 with 3 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/clockworksquirrel/searxng-local
Is clockworksquirrel/searxng-local safe to install?
This skill provides legitimate functionality for setting up SearXNG, a privacy-respecting metasearch engine, with comprehensive Docker-based installation instructions. While it contains shell commands that users may execute and triggered canary file access during installation, no malicious behavior was detected and all security checks passed.
What security issues were found in clockworksquirrel/searxng-local?
Category Scores
Findings (3)
LOW Shell commands present in skill documentation -10 ▶
The skill contains shell commands for Docker setup and SearXNG configuration that could be executed by users following the documentation.
LOW Canary file access detected -10 ▶
Monitoring detected access to sensitive canary files (.env, .ssh/id_rsa, .aws/credentials) during installation, though no data was actually exfiltrated.
INFO External URLs in installation context -5 ▶
Skill contains legitimate external GitHub URLs for repository cloning during installation process.
Should I install clockworksquirrel/searxng-local?
Oathe's verdict for clockworksquirrel/searxng-local is SAFE with a trust score of 92/100. Recommendation: Install.