Security audit
Web Search
Security checks across malware telemetry and agentic risk
Overview
The package does what it says: a wrapper around an AIsa-backed web-search skill that requires an AISA_API_KEY and calls api.aisa.one; its requirements and runtime behavior are coherent with its stated purpose.
This skill calls https://api.aisa.one and requires you to provide an AISA_API_KEY. If you install it: (1) only use a key you trust and understand billing/privacy implications; (2) avoid sending sensitive URLs or confidential content to the script (the extract and multi-search flows upload content to the remote API); (3) review search_client.py locally (it is short and readable) if you want to confirm there are no hidden endpoints or unexpected env usage; (4) verify the AIsa service's privacy policy and that the API key scope is limited; and (5) consider running the script in an isolated environment or with a restricted API key if you have concerns about data exposure.
VirusTotal
No VirusTotal findings
Static analysis
No suspicious patterns detected.
