@steipete

Brave Search

Web search and content extraction via Brave Search API. Use for searching documentation, facts, or any web content. Lightweight, no browser required.

Current version
v1.0.1
174 5万All installs 732

v1.0.1

2026/01/05

Version

No changelog provided.

Security Scan

Status

suspicious

Open VirusTotal

OpenClaw

gpt-5-mini

suspicious

OpenClaw analysis

The skill's description and README claim a Brave Search API integration and an API key, but the shipped code actually scrapes Brave Search HTML and does not use any API key — that mismatch (plus an instruction to run npm ci) is inconsistent and worth asking the author or treating cautiously.

Confidence: high

VirusTotal

Type: OpenClaw Skill Name: brave-search Version: 1.0.1 The OpenClaw AgentSkills bundle 'brave-search' is classified as benign. The `SKILL.md` provides clear, non-malicious instructions for web search and content extraction. The `search.js` and `content.js` scripts perform HTTP requests to `search.brave.com` and user-specified/search-result URLs, respectively, using standard web scraping and HTML parsing libraries. There is no evidence of intentional data exfiltration, malicious execution, persistence mechanisms, prompt injection attempts against the agent, or obfuscation. The dependencies listed in `package.json` and `package-lock.json` are appropriate for the stated functionality.

Metadata

  • Owner: @steipete
  • Created: 2026/01/04
  • Updated: 2026/03/10
  • Versions: 2
  • Comments: 5
  • Scan checked at: 2026/02/11

Runtime

No runtime requirements are exposed in the official public payload.