T05 · Unauthorized Access and Privilege Escalation
- Location
scripts/search_client.py:102- Finding
Bundled Client Exceeds the Skill's Declared Tavily-Only Scope
- Content
View full analysis
None: api_key = get_api_key() urls = [u.strip() for u in args.urls.split(",")] data = aisa_post(api_key, "/tavily/extract", {"urls": urls}) if "results" in data and isinstance(data["results"], list): for r in data["results"]: print(f"\n{'='*60}") print(f" URL: {r.get('url', 'Unknown')}") print(f"{'='*60}") content = r.get("raw_content", "") print(content[:3000] if content else "(no content)") else: print(json.dumps(data, indent=2)) def cmd_sonar(args: argparse.Namespace) -> None: api_key = get_api_key() endpoint_map = { "sonar": "/sonar", "sonar-pro": "/sonar-pro", "sonar-reasoning-pro": "/sonar-reasoning-pro", "sonar-deep-research": "/sonar-deep-research", } endpoint = endpoint_map.get(args.model, "/sonar") data = aisa_post(api_key, endpoint, { "model": args.model, "messages": [{"role": "user", "content": args.query}], }) print_results(data, f"Perplexity ({args.model})") def cmd_verity(args: argp ...[truncated 6469 chars]- Remediation
View remediation
