Security audit
OpenClaw DuckDuckGo Plugin
Security checks for vulnerabilities and agentic risk
Overview
This package is a DuckDuckGo web search plugin that only registers a user-invoked search provider and sends search queries to DuckDuckGo.
Before installing, understand that your search queries will be sent to DuckDuckGo when you invoke this provider. No API key, local credential access, shell execution, or broad local indexing was found in the inspected artifacts.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.
