Web Search API

• Risk level: Low
• Analyzed: Feb 25, 2026, 3:38 AM
• Findings: 0
• Version: 1.0.1

Overview

The skill is internally consistent: it implements a Node.js CLI wrapper around searchapi.io, asks users to supply an API key stored in a local config file, and does not request unrelated credentials or privileged system access.

This skill appears to do what it claims (a Node.js CLI wrapper for searchapi.io). Before installing: (1) review the bundled websearchapi.js yourself — it runs only in the tool directory and calls searchapi.io; (2) be aware the API key is stored in plaintext config.json in the tool folder — if that violates your security policy, consider using a secrets manager or setting strict file permissions; (3) do not paste someone else’s API key; (4) run the tool in a restricted environment or sandbox if you are unsure about running third-party scripts; (5) if you need tighter controls, adapt the code to read the API key from an environment variable or a secrets provider instead of a local file.