📦 alexey-brave-search — 极速网页搜索
v1.0.0无需浏览器即可调用 Brave Search API，快速检索并提取网页内容，轻松获取文档、事实或任何网络信息。
0· 325·0 当前·0 累计
by 下载技能包
最后更新
2026/2/28
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
Do not provide any API keys or secrets to this skill yet. The README claims a Brave Search API key is needed, but the code simply scrapes search.brave.com and does not read BRAVE_API_KEY — this mismatch could be sloppy documentation or an attempt to collect a key. If you want to use it: (1) inspect the code (search.js/content.js) yourself — they are present and readable — to confirm behavior; (2) run it in a sandboxed environment or throwaway container before granting network access; (3) if you ...详细分析 ▾
⚠ 用途与能力
Name/description advertise 'Brave Search API' and SKILL.md says 'Needs env: BRAVE_API_KEY', yet the code (search.js) builds a public search URL (https://search.brave.com/search?q=...) and scrapes HTML; no API calls or API-key usage are present. Asking for an API key is not justified by the code.
⚠ 指令范围
SKILL.md instructs running npm ci and sets a BRAVE_API_KEY requirement, but metadata lists no required env vars and the scripts do not read any environment variables. The runtime instructions therefore diverge from the actual behavior in the included code.
ℹ 安装机制
No formal install spec in registry, but SKILL.md tells the user to run 'npm ci' — package.json and package-lock.json are included. Dependencies are common (jsdom, readability, turndown) pulled from npm (moderate risk). Nothing is downloaded from obscure URLs or executed from remote archives.
⚠ 凭证需求
The README asks for BRAVE_API_KEY although the skill's package metadata does not declare required env vars and the JS files never access process.env; requesting a secret that the code doesn't need is disproportionate and could trick users into supplying credentials unnecessarily.
✓ 持久化与权限
Skill is not always-enabled, does not request system-wide config or modify other skills, and contains no autonomously privileged installation behavior. It only runs as-invoked.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/28
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install alexey-brave-search
镜像加速npx clawhub@latest install alexey-brave-search --registry https://cn.longxiaskill.com