Security audit
AIsa Multi Search Engine
Security checks for vulnerabilities and agentic risk
Overview
This looks like a legitimate AIsa-backed search plugin, with the main caveat that the registry summary underreports its API-key requirement and code-based runtime.
Before installing, be comfortable that your search queries, URLs you ask it to extract, and results used for synthesis will be sent to api.aisa.one and may use downstream services such as Tavily or Perplexity through AIsa. You will need to provide an AIsa API key even though the registry requirements summary says none. Because the provided source view for the main code files is truncated, review the full index.ts and scripts/search_client.py from the repository if you need higher assurance.
SkillSpector was not run because this plugin release contains no bundled skills.
Endor dependency reachability
Checked Nov 7, 2026 · 2:50 AM UTC
No reachable vulnerabilities reported
Endor dependency scan completed.
