Security audit
Search Fusion
Security checks for vulnerabilities and agentic risk
Overview
This appears to be a legitimate OpenClaw search-broker plugin, with opt-in raw search payload exposure and a host-version hygiene warning.
Install only if you are comfortable sending search queries to the configured providers. Keep includeRawPayloads and includeDiscarded disabled unless you specifically need debugging or audit fidelity, and use a patched OpenClaw version rather than relying on the minimum version accepted by the package metadata.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.