ddg-search

• Analyzed: May 14, 2026, 4:10 AM
• Findings: 1
• Version: 2026.2.15
• Hash: f94177c954a740347b573aa855539d77a7a8ea4a6bbfa8431fa97be0425c754a
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is classified as benign. The `_meta.json` contains standard metadata. The `SKILL.md` provides clear instructions for installing and using a DuckDuckGo search CLI via `npm install -g ddg-search`. There is no evidence of prompt injection attempts, malicious commands, data exfiltration, persistence mechanisms, or obfuscation within the provided files. While `npm install` carries inherent supply chain risks, the instruction itself is a standard method for installing Node.js CLIs and does not indicate malicious intent from this skill bundle.