Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed AISA-backed search client that sends user queries to an external search API and does not show hidden persistence, credential theft, or destructive behavior.
Install only if you are comfortable sending your search queries, requested URLs, and AISA API credentials to AISA's API. Avoid using it for sensitive local credential access, private documents, or queries containing secrets unless that external processing is acceptable.
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
## When NOT to Use
- Do not use this skill for browser-cookie extraction, passwords, Keychain access, or other local sensitive credential access.
- Prefer a different skill when the user request is outside this skill's domain.
## Capabilities
The skill declares it needs an API key and invokes a Python client that will likely make outbound network requests, but it does not declare any explicit tool scope such as permissions or allowed-tools. This weakens least-privilege controls and makes the skill harder to sandbox or review, increasing the chance of unintended environment-variable exposure or unauthorized network use.
The manifest describes a skill for comprehensive multi-source search and synthesis across web, academic, Tavily, and synthesis layers. This file additionally provides an extract mode that retrieves raw page content from arbitrary URLs and a sonar mode that calls separate research/chat-style endpoints, which are broader capabilities than the stated multi-search orchestration purpose.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
from concurrent.futures import ThreadPoolExecutor, as_completed
from typing import Any
AISA_BASE = "https://api.aisa.one/apis/v1"
def get_api_key() -> str:
This code explicitly sets the explanation language to "en" when calling the synthesis endpoint. That imposes a specific language/locale choice on users without opt-in or an alternative selection path, which matches the policy's language/locale violation criteria.
The manifest sets the skill language to "en" on L07, which is a natural-language locale constraint. There is no indication in this file that users can opt into another language or that the English-only setting is required for a documented region- or compliance-specific purpose.
get_api_key() accesses AISA_API_KEY from the environment to authenticate outbound requests. While network access is expected for search, reading environment-stored secrets is a distinct capability not reflected in the manifest's purpose statement and may be considered broader than the user-facing description.
No suspicious patterns detected.