Security audit
Security checks for vulnerabilities and agentic risk
This is a straightforward web-search helper skill, with the main caveat that search queries are sent to external providers without an explicit privacy warning.
Before installing, treat any search query as information that may be sent to third-party search or AI-search providers. Avoid putting secrets, private documents, customer data, or confidential workspace details into queries unless that disclosure is acceptable.
The skill directs the agent to immediately send user-provided queries to external search providers, but it never requires disclosure that the query leaves the local environment. This can expose sensitive user inputs, internal context, or derived prompts to third-party services without informed consent, especially because the skill is framed as mandatory for broad classes of requests.
The instruction to 'ALWAYS run the search immediately' and 'don't ask permission' removes an important safety checkpoint before transmitting data to third-party providers. In context, this increases the chance of unintended disclosure of personal, proprietary, or security-sensitive information because the tool is mandatory and encourages automatic external requests.
No suspicious patterns detected.
