Back to plugin

Security audit

Web Search

Security checks across malware telemetry and agentic risk

Overview

The package does what it says: a wrapper around an AIsa-backed web-search skill that requires an AISA_API_KEY and calls api.aisa.one; its requirements and runtime behavior are coherent with its stated purpose.

This skill calls https://api.aisa.one and requires you to provide an AISA_API_KEY. If you install it: (1) only use a key you trust and understand billing/privacy implications; (2) avoid sending sensitive URLs or confidential content to the script (the extract and multi-search flows upload content to the remote API); (3) review search_client.py locally (it is short and readable) if you want to confirm there are no hidden endpoints or unexpected env usage; (4) verify the AIsa service's privacy policy and that the API key scope is limited; and (5) consider running the script in an isolated environment or with a restricted API key if you have concerns about data exposure.

VirusTotal

No VirusTotal findings

View on VirusTotal

Static analysis

No suspicious patterns detected.