WebSearchAPI

• Analyzed: May 11, 2026, 4:39 AM
• Findings: 1
• Version: 1.0.0
• Hash: 053b5d30f4d6d6cd58c0de24504c1336fac6a58830dad0ddf8d7a93421e70e1f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a legitimate search tool interface for the SearchAPI.io service, supporting various search types like news, finance, and maps. The implementation in `websearchapi.js` is clean, using only Node.js built-in modules (`https`, `fs`) without external dependencies or risky execution patterns like `eval` or shell commands. While `config.json` contains a hardcoded API key (rEux5Wb3fyHM47TKyCpNdHGf), this appears to be a developer oversight or a provided default for ease of use rather than a malicious indicator. No evidence of data exfiltration, persistence, or prompt injection was found.