Back to plugin

Security audit

AIsa Search Command Center

Security checks across malware telemetry and agentic risk

Overview

The package is internally consistent: it is a search/research skill that requires a single AISA_API_KEY and runs a bundled Python client against api.aisa.one — the requested files, env var, and instructions line up with that purpose.

This skill is coherent with its stated purpose, but installing it gives the bundled Python client permission to send queries and any provided inputs to https://api.aisa.one using the AISA_API_KEY you supply. Before installing: (1) only provide an API key you intend to use for this third-party service and avoid using keys with broad, unrelated privileges; (2) review AIsa's privacy/data-retention policy if you will send sensitive data; (3) verify the plugin source (repository/homepage) if you need stronger provenance guarantees; and (4) rotate the key if you later uninstall the plugin or suspect misuse.

VirusTotal

No VirusTotal findings

View on VirusTotal

Static analysis

No suspicious patterns detected.