Is eg-yks/local-websearch-1 safe?

https://github.com/openclaw/skills/tree/main/skills/eg-yks/local-websearch-1

99
SAFE

This is a legitimate web search skill that provides privacy-respecting search functionality through self-hosted SearXNG instances. The skill contains only standard Python HTTP client code with no malicious behavior, hidden functionality, or security vulnerabilities detected. All monitoring indicates normal installation and operation behavior.

Category Scores

Prompt Injection 100/100 · 30%
Data Exfiltration 100/100 · 25%
Code Execution 100/100 · 20%
Clone Behavior 100/100 · 10%
Canary Integrity 100/100 · 10%
Behavioral Reasoning 85/100 · 5%

Findings (1)

LOW Inherent web search privacy considerations -15 ▶

The skill connects to user-configured SearXNG instances to perform web searches. If the SearXNG instance is compromised or malicious, search queries could potentially be logged or monitored. However, this is an inherent risk of any web search functionality rather than malicious behavior by the skill itself.