Security audit
OpenClaw DuckDuckGo Plugin
Security checks for vulnerabilities and agentic risk
Overview
This package is a DuckDuckGo web-search plugin whose behavior matches its stated purpose and does not show hidden persistence, credential use, or unrelated system access.
Installing this enables OpenClaw to perform DuckDuckGo searches without an API key. Consider that any search queries sent through it will be transmitted to DuckDuckGo, but the inspected artifact does not show hidden local data access or persistent behavior.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.