OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn4 providerslatest audit Mar 18, 2026
Independent checks from skills.sh's audit partners.
The skill enables web search and content extraction. It is safe for use but carries a risk of indirect prompt injection from external web content and conducts network operations to non-whitelisted domains. The documentation incorrectly states that the Brave API is used, whereas the script actually scrapes the public search site.
Detected behaviors
No alerts
No issues
5/6 files flagged