anysearch is an AI agent skill, created by anysearch-ai and published at anysearch-ai/anysearch-skill. ClawSecure audited anysearch across 19 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 0/100 (High Risk). The 17 findings concentrate in Data Exfiltration, Command Injection and Code Injection, including Credential Harvesting via Network and Multi-File Data Exfiltration Chain. 8 were rated high or critical severity.
Is anysearch safe?
ClawSecure audited anysearch and assigned a security score of 0/100 (High Risk), identifying 17 findings across Data Exfiltration and Command Injection. Review the findings below before installing.
What did ClawSecure find in anysearch?
ClawSecure identified 17 findings in anysearch, concentrated in Data Exfiltration, Command Injection and Code Injection. 8 were rated high or critical severity. The most severe include Credential Harvesting via Network and Multi-File Data Exfiltration Chain.
How was anysearch audited?
ClawSecure ran anysearch through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 19 files from anysearch-ai/anysearch-skill.
What does a score of 0 mean?
ClawSecure assigned anysearch a security score of 0/100, placing it in the High Risk range. This is driven by 17 findings led by Data Exfiltration that should be addressed before use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).
Audit Findings for anysearch
ClawSecure detected 17 security findings in anysearch, spanning Data Exfiltration, Command Injection, Code Injection and Unauthorized Tool Use.
- critical · Credential Harvesting via Network. Data Exfiltration finding.
- critical · Multi-File Data Exfiltration Chain. Data Exfiltration finding.
- critical · Environment Variable Exfiltration via Network. Data Exfiltration finding detected in
scripts/anysearch_cli.py. - high · Suspicious Pattern: fs.readFileSync(. Data Exfiltration finding detected in
scripts/anysearch_cli.js:27. - high · Suspicious Pattern: fs.readFileSync(. Data Exfiltration finding detected in
scripts/anysearch_cli.js:291. - high · Suspicious Pattern: fs.readFileSync(. Data Exfiltration finding detected in
scripts/anysearch_cli.js:335. - high · Suspicious Pattern: fs.readFileSync(. Data Exfiltration finding detected in
scripts/anysearch_cli.js:336. - high · Potentially dangerous code pattern detected: curl.*\|.*sh. Code Injection finding detected in
SKILL.md. - medium · Undeclared Network Access. Unauthorized Tool Use finding detected in
SKILL.md. - medium · Environment Variable Enumeration. Data Exfiltration finding detected in
scripts/anysearch_cli.py. - medium · Suspicious Pattern: https.request(. Data Exfiltration finding detected in
scripts/anysearch_cli.js:67. - medium · Outbound HTTP Request Detected. Data Exfiltration finding detected in
scripts/anysearch_cli.py:77.
Showing the 12 highest-severity of 17 findings. The full interactive list appears below.
3-Layer Audit Protocol
Security Recommendations for anysearch
Audit external network connections
Harden command execution
Eliminate dynamic code execution
Related Security Research
ClawHavoc Explained: The Malware Family Targeting AI Agents→Beyond Static Scans: Why ClawSecure Verifies Agentic Intent→Related AI Agent Security Audits
Scanned on July 21, 2026. anysearch is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.