anysearch is an AI agent skill, created by anysearch-ai and published at anysearch-ai/anysearch-skill. ClawSecure audited anysearch across 18 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 0/100 (High Risk). The 17 findings concentrate in Data Exfiltration, Command Injection and Unauthorized Tool Use, including Environment variable access with network calls in... and Multi-file exfiltration chain detected: scripts/anysearch_cli.py.... 8 were rated high or critical severity.
Is anysearch safe?
ClawSecure audited anysearch and assigned a security score of 0/100 (High Risk), identifying 17 findings across Data Exfiltration and Command Injection. Review the findings below before installing.
What did ClawSecure find in anysearch?
ClawSecure identified 17 findings in anysearch, concentrated in Data Exfiltration, Command Injection and Unauthorized Tool Use. 8 were rated high or critical severity. The most severe include Environment variable access with network calls in... and Multi-file exfiltration chain detected: scripts/anysearch_cli.py....
How was anysearch audited?
ClawSecure ran anysearch through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 18 files from anysearch-ai/anysearch-skill.
What does a score of 0 mean?
ClawSecure assigned anysearch a security score of 0/100, placing it in the High Risk range. This is driven by 17 findings led by Data Exfiltration that should be addressed before use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).
Audit Findings for anysearch
ClawSecure detected 17 security findings in anysearch, spanning Data Exfiltration, Command Injection, Unauthorized Tool Use and Policy Violation.
- critical · Environment variable access with network calls in.... Data Exfiltration finding.
- critical · Multi-file exfiltration chain detected: scripts/anysearch_cli.py.... Data Exfiltration finding.
- critical · Script accesses environment variables and makes network calls in.... Data Exfiltration finding detected in
/tmp/url-scans/cffdb89dc8137a04/scripts/anysearch_cli.py. - high · Pattern detected: fs.readFileSync(. Data Exfiltration finding detected in
scripts/anysearch_cli.js:27. - high · Pattern detected: fs.readFileSync(. Data Exfiltration finding detected in
scripts/anysearch_cli.js:291. - high · Pattern detected: fs.readFileSync(. Data Exfiltration finding detected in
scripts/anysearch_cli.js:335. - high · Pattern detected: fs.readFileSync(. Data Exfiltration finding detected in
scripts/anysearch_cli.js:336. - high · Potentially dangerous code pattern detected: curl.*\|.*sh. Code Injection finding detected in
SKILL.md. - medium · Skill code uses network libraries but doesn't declare network.... Unauthorized Tool Use finding detected in
/tmp/url-scans/cffdb89dc8137a04/SKILL.md. - medium · Script iterates through environment variables in.... Data Exfiltration finding detected in
/tmp/url-scans/cffdb89dc8137a04/scripts/anysearch_cli.py. - medium · Pattern detected: https.request(. Data Exfiltration finding detected in
scripts/anysearch_cli.js:67. - medium · Pattern detected: requests.post(. Data Exfiltration finding detected in
scripts/anysearch_cli.py:77.
Showing the 12 highest-severity of 17 findings. The full interactive list appears below.
3-Layer Audit Protocol
Security Recommendations for anysearch
Audit external network connections
Harden command execution
Resolve policy violations
Related Security Research
ClawHavoc Explained: The Malware Family Targeting AI Agents→Beyond Static Scans: Why ClawSecure Verifies Agentic Intent→Related AI Agent Security Audits
Scanned on July 10, 2026. anysearch is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.