Intelligent search for agents. Multi-source retrieval with confidence scoring - web, academic, and Tavily in one unified API

• Outcome: Pass
• Latest audit: May 28, 2026 at 9:54 AM UTC
• Version:
  1.0.0

Overview

This skill is a disclosed external search client that sends user-chosen queries and URLs to AIsa/Tavily-backed APIs, with no hidden persistence or destructive behavior found.

Install only if you are comfortable sending search terms, URLs, and retrieved-result payloads to AIsa/Tavily-backed services. Use a dedicated revocable AISA_API_KEY, avoid secrets, regulated data, and internal-only URLs, and keep crawl or extraction requests limited to public targets you intend to query.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (15)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 91% confidence
• Finding: The skill declares required environment variables and demonstrates extensive network access, but the static finding indicates these capabilities are not reflected in declared permissions. This creates a transparency and policy-enforcement gap: users or hosting platforms may not realize the skill can transmit prompts, URLs, and retrieved content to external services.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 88% confidence
• Finding: The top-level description frames the skill as search, but the documented behavior also includes full-text retrieval, URL extraction, crawling, sitemap generation, and server-side explanation/synthesis. Those extra capabilities materially expand what user-supplied data and third-party content may be collected and transmitted, increasing privacy and compliance risk beyond a normal search tool.

Missing User Warnings

Medium

• Confidence: 94% confidence
• Finding: The examples encourage sending user queries and arbitrary URLs to third-party APIs for search, extraction, crawl, and map operations without warning that this transfers potentially sensitive user input and may trigger interactions with external sites. In an agent setting, this can lead to unreviewed exfiltration of internal prompts, URLs, or proprietary targets.

Missing User Warnings

Medium

• Confidence: 87% confidence
• Finding: This client sends user-provided queries and URLs to a third-party service without any explicit disclosure or consent flow at the CLI call sites. In an agent setting, users may enter sensitive prompts, internal URLs, or proprietary research terms, which would then be transmitted off-host to an external provider unexpectedly.

External Transmission

Medium

• Category: Data Exfiltration

Content

```bash
# Basic web search
curl -X POST "https://api.aisa.one/apis/v1/scholar/search/web?query=AI+frameworks&max_num_results=10" \
  -H "Authorization: Bearer $AISA_API_KEY"

# Full text search (with page content)

• Confidence: 86% confidence
• Finding: curl -X POST "https://api.aisa.one/apis/v1/scholar/search/web?query=AI+frameworks&max_num_results=10" \ -H "Authorization: Bearer $AISA_API_KEY" # Full text search (with page content) curl -X POST

External Transmission

Medium

• Category: Data Exfiltration

Content

```bash
# Basic web search
curl -X POST "https://api.aisa.one/apis/v1/scholar/search/web?query=AI+frameworks&max_num_results=10" \
  -H "Authorization: Bearer $AISA_API_KEY"

# Full text search (with page content)

• Confidence: 86% confidence
• Finding: https://api.aisa.one/

External Transmission

Medium

• Category: Data Exfiltration

Content

-H "Authorization: Bearer $AISA_API_KEY"

# Full text search (with page content)
curl -X POST "https://api.aisa.one/apis/v1/search/full?query=latest+AI+news&max_num_results=10" \
  -H "Authorization: Bearer $AISA_API_KEY"
```

• Confidence: 92% confidence
• Finding: https://api.aisa.one/

External Transmission

Medium

• Category: Data Exfiltration

Content

```bash
# Search academic papers
curl -X POST "https://api.aisa.one/apis/v1/scholar/search/scholar?query=transformer+models&max_num_results=10" \
  -H "Authorization: Bearer $AISA_API_KEY"

# With year filter

• Confidence: 82% confidence
• Finding: https://api.aisa.one/

External Transmission

Medium

• Category: Data Exfiltration

Content

-H "Authorization: Bearer $AISA_API_KEY"

# With year filter
curl -X POST "https://api.aisa.one/apis/v1/scholar/search/scholar?query=LLM&max_num_results=10&as_ylo=2024&as_yhi=2025" \
  -H "Authorization: Bearer $AISA_API_KEY"
```

• Confidence: 82% confidence
• Finding: https://api.aisa.one/

External Transmission

Medium

• Category: Data Exfiltration

Content

```bash
# Intelligent hybrid search
curl -X POST "https://api.aisa.one/apis/v1/scholar/search/smart?query=machine+learning+optimization&max_num_results=10" \
  -H "Authorization: Bearer $AISA_API_KEY"
```

• Confidence: 84% confidence
• Finding: https://api.aisa.one/

External Transmission

Medium

• Category: Data Exfiltration

Content

```bash
# Tavily search
curl -X POST "https://api.aisa.one/apis/v1/tavily/search" \
  -H "Authorization: Bearer $AISA_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"query":"latest AI developments"}'

• Confidence: 89% confidence
• Finding: https://api.aisa.one/

External Transmission

Medium

• Category: Data Exfiltration

Content

-d '{"query":"latest AI developments"}'

# Extract content from URLs
curl -X POST "https://api.aisa.one/apis/v1/tavily/extract" \
  -H "Authorization: Bearer $AISA_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"urls":["https://example.com/article"]}'

• Confidence: 95% confidence
• Finding: https://api.aisa.one/

External Transmission

Medium

• Category: Data Exfiltration

Content

-d '{"urls":["https://example.com/article"]}'

# Crawl web pages
curl -X POST "https://api.aisa.one/apis/v1/tavily/crawl" \
  -H "Authorization: Bearer $AISA_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"url":"https://example.com","max_depth":2}'

• Confidence: 97% confidence
• Finding: https://api.aisa.one/

External Transmission

Medium

• Category: Data Exfiltration

Content

-d '{"url":"https://example.com","max_depth":2}'

# Site map
curl -X POST "https://api.aisa.one/apis/v1/tavily/map" \
  -H "Authorization: Bearer $AISA_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"url":"https://example.com"}'

• Confidence: 94% confidence
• Finding: https://api.aisa.one/

External Transmission

Medium

• Category: Data Exfiltration

Content

```bash
# Generate explanations with confidence scoring
curl -X POST "https://api.aisa.one/apis/v1/scholar/explain" \
  -H "Authorization: Bearer $AISA_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"results":[...],"language":"en","format":"summary"}'

• Confidence: 87% confidence
• Finding: https://api.aisa.one/

VirusTotal

66/66 vendors flagged this skill as clean.