Web search using curl + multiple search engines (Baidu, Google, Bing, DuckDuckGo). Activates when user asks to search, look up, or query something online. Includes security enhancements: input sanitization, command injection protection, and URL encoding.
SkillScore86Maintained
Automatic
◆Research pack
Last verified 8/23/2026
What it changes
Passed 18 of 21 test cases with the skill, and 11 of 21 without it.
Without skill55%
With skill86%
Checks it passed that the model alone missed
Identifies Baidu as the default search engine
Uses Baidu search engine alias bd to query results
States that the lower limit for maximum results is 1
and 6 more in the full report
7 fixed12 passed either way3 still failing0 broke
Pass-rate lift
+32 pp
Tokens
-22%
Agent turns
0%
Response time
-46%
Model gemini-3.6-flashMeasured 8/23/2026v119 of 22 cases passed with skill · 21 comparable
Tokens, turns and time describe resource use, not a dollar price.
See it in action
One of 6 test cases the skill fixed. Same model, same prompt, with and without the skill.
1 of 6
Prompt
Which environment variable name is checked to configure the default search provider across queries?
What was checked, without and with the skill
Checked
Without skill
With skill
Identifies SEARCH_ENGINE as the environment variable name
Missed
Passed
case-12 · gemini-3.6-flash · 8/23/2026 · answers are capped and redacted
What's inside
The instructions your model reads when the skill loads.
SKILL.md83 lines2 filesincludes scripts
Curl Search Skill
Web search using curl + multiple search engines. This skill provides a lightweight alternative when dedicated search APIs are unavailable.
Supported Search Engines
Engine
Alias
Description
Baidu
bd
Fast for China, default option
Google
g
Requires proxy/VPN in China
Bing
b
Microsoft Bing
DuckDuckGo
ddg
Privacy-focused search
Usage Examples
Search for OpenClaw tutorial
Google search AI development
Find Python tutorials with bing
Requirements
curl - Command-line HTTP client
python3 - For URL encoding
Security Features
This skill includes several security enhancements:
1. Input Sanitization
Removes dangerous shell metacharacters that could be exploited:
sanitize_input() {
local input="$1"
echo "$input" | sed 's/[^a-zA-Z0-9 \_\-\.\~\x{4e00}-\x{9fff}]//g'
}