Security audit
OpenClaw DuckDuckGo Plugin
Security checks for vulnerabilities and agentic risk
Overview
This package coherently provides a DuckDuckGo web-search plugin and does not show hidden data access, persistence, or unsafe behavior.
Before installing, confirm that this @openclaw-named package comes from the publisher you expect. Functionally, it will send search queries to DuckDuckGo when the web-search provider is used, but it does not appear to read local files, use credentials, or persist data beyond in-memory caching.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.