Is Nex-ZMH/Agent-websearch-skill safe?
Yes. Nex-ZMH/Agent-websearch-skill is safe to install. Oathe's behavioral security audit gave the Agent-websearch-skill skill by Nex-ZMH a trust score of 91/100 with 4 findings, none critical or high.
https://github.com/Nex-ZMH/Agent-websearch-skill
Is Nex-ZMH/Agent-websearch-skill safe to install?
This is a legitimate multi-engine search skill that provides search functionality across DuckDuckGo, Tavily, and Bing APIs with automatic failover and quota management. The code appears well-structured and does what it claims to do without evidence of malicious behavior.
What security issues were found in Nex-ZMH/Agent-websearch-skill?
Category Scores
Findings (4)
MEDIUM Executable Python Code Present -20 ▶
The skill contains executable Python code that will run in the agent environment, which inherently carries execution risk despite appearing legitimate.
LOW External Network Requests -10 ▶
Skill makes HTTP requests to external search services, which could potentially be used for data exfiltration if modified.
LOW API Key Configuration Required -15 ▶
Skill requires configuration of potentially sensitive API keys through environment variables or config files.
INFO Chinese Language Content -5 ▶
SKILL.md contains Chinese text descriptions alongside English, which is normal for international developers but noted for completeness.
Should I install Nex-ZMH/Agent-websearch-skill?
Oathe's verdict for Nex-ZMH/Agent-websearch-skill is SAFE with a trust score of 91/100. Recommendation: Install.