Is Zjianru/web-search-pro safe?
Yes. Zjianru/web-search-pro is safe to install. Oathe's behavioral security audit gave the web-search-pro skill by Zjianru a trust score of 92/100 with 3 findings, none critical or high.
https://github.com/Zjianru/web-search-pro
Is Zjianru/web-search-pro safe to install?
This is a legitimate web search skill that provides multi-engine search capabilities with proper documentation and clean implementation. The main security considerations are the executable JavaScript code and external API dependencies, but no malicious behavior was detected.
What security issues were found in Zjianru/web-search-pro?
Category Scores
Findings (3)
MEDIUM Executable JavaScript Code -25 ▶
The skill contains multiple JavaScript files that execute when invoked, including search.mjs and engine-specific modules. While the code appears to implement legitimate web search functionality, it creates a code execution surface that could be exploited if modified.
LOW External API Communication -5 ▶
The skill makes HTTP requests to external search APIs (Tavily, Exa, Serper, SerpAPI). While this is the intended functionality, it creates a potential channel for data exfiltration if the skill were compromised.
LOW API Key Dependency -10 ▶
The skill requires API keys for external search services, creating a dependency on proper secret management. Improper handling could lead to credential exposure.
Should I install Zjianru/web-search-pro?
Oathe's verdict for Zjianru/web-search-pro is SAFE with a trust score of 92/100. Recommendation: Install.