web-search-plus-plugin 1.3.2 → 1.3.4

package/index.ts

@@ -1,4 +1,3 @@
-import { definePluginEntry } from "openclaw/plugin-sdk/plugin-entry";
 import { Type } from "@sinclair/typebox";
 import { spawn } from "child_process";
 import fs from "fs";
@@ -15,6 +14,12 @@ function getPluginDir(): string {
   return path.join(process.cwd(), "skills", "web-search-plus-plugin");
 }
 
+const SENSITIVE_PATTERN = /(?:key|token|secret|password|api[_-]?key)\s*[=:]\s*\S+/gi;
+
+function sanitizeOutput(text: string): string {
+  return text.replace(SENSITIVE_PATTERN, "[REDACTED]");
+}
+
 function loadEnvFile(envPath: string): Record<string, string> {
   if (!fs.existsSync(envPath)) return {};
   const env: Record<string, string> = {};
@@ -66,7 +71,9 @@ function runPython(
       if (!settled) {
         settled = true;
         clearTimeout(timer);
-        resolve({ stdout: "", stderr: err.message, code: 1 });
+        // Only expose the error message, not the full error object (may contain env/args)
+        const safeMsg = err.code === "ENOENT" ? "python3 not found" : "Process error";
+        resolve({ stdout: "", stderr: safeMsg, code: 1 });
       }
     });
   });
@@ -75,12 +82,7 @@ function runPython(
 const PLUGIN_DIR = getPluginDir();
 const scriptPath = path.join(PLUGIN_DIR, "scripts", "search.py");
 
-export default definePluginEntry({
-  id: "web-search-plus-plugin",
-  name: "Web Search Plus",
-  description:
-    "Multi-provider web search (Serper/Google, Tavily, Querit/Multilingual AI Search, Exa/Neural+Deep, Perplexity, You.com, SearXNG) with intelligent auto-routing",
-  register(api) {
+export default function (api: any) {
     // Bridge OpenClaw config fields to env vars expected by search.py
     const configEnv: Record<string, string> = {};
     const pluginConfig: Record<string, string> = (api.pluginConfig ?? {}) as Record<string, string>;
@@ -225,18 +227,17 @@ export default definePluginEntry({
           const result = await runPython(args, childEnv, 75000);
 
           if (result.code !== 0) {
-            const stderr = result.stderr.trim() || "Unknown error";
+            const stderr = sanitizeOutput(result.stderr.trim()) || "Unknown error";
             return {
               content: [{ type: "text", text: `Search failed (exit ${result.code}): ${stderr}` }],
             };
           }
 
           return {
-            content: [{ type: "text", text: result.stdout.trim() || "{}" }],
+            content: [{ type: "text", text: sanitizeOutput(result.stdout.trim()) || "{}" }],
           };
         },
       },
       { optional: true },
     );
-  },
-});
+}

package/openclaw.plugin.json

@@ -1,7 +1,7 @@
 {
   "id": "web-search-plus-plugin",
   "name": "Web Search Plus",
-  "version": "1.3.2",
+  "version": "1.3.4",
   "description": "Multi-provider web search (Serper/Google, Tavily, Querit/Multilingual AI Search, Exa/Neural+Deep, Perplexity, You.com, SearXNG) with intelligent auto-routing",
   "configSchema": {
     "type": "object",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "web-search-plus-plugin",
-  "version": "1.3.2",
+  "version": "1.3.4",
   "description": "OpenClaw plugin: multi-provider web search (Serper/Google, Tavily, Querit/Multilingual AI Search, Exa/Neural+Deep, Perplexity, You.com, SearXNG) with intelligent auto-routing",
   "type": "module",
   "main": "index.ts",