Security audit
Security checks for vulnerabilities and agentic risk
This is a straightforward Chinese search helper that sends search terms to external search engines and does not show hidden persistence, credential access, or destructive behavior.
Install only if you want a Chinese web-search helper that sends your search terms to external providers such as Bing China, 360, and Zhihu. Do not use it for secrets, credentials, private internal project names, or other sensitive queries.
The file presents the skill as a Chinese-only capability for domestic Chinese information queries, with all user-facing documentation in Chinese and the scope framed around Chinese search use. There is no indication that users can choose another language or locale, which may violate language/locale choice policy.
subprocess module calls execute external commands. Without careful input validation, this enables command injection.
def curl_get(url, timeout=12):
try:
r = subprocess.run(
['curl.exe', '-s', '-L', '--max-time', str(timeout),
'-H', 'User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36',
'-H', 'Accept-Language: zh-CN,zh;q=0.9', url],
The request header explicitly sets Accept-Language to 'zh-CN,zh;q=0.9', which forces a specific language/locale preference for all users. The file does not offer a language choice or explain why this locale restriction is necessary, which is a natural-language policy concern.
The skill sends the user's search query directly to Bing, 360, and Zhihu without any notice, consent, or minimization. If users provide sensitive terms, internal project names, credentials, health data, or other confidential text, that data is disclosed to third-party services and may be logged or profiled.
The skill explicitly states it sends search requests directly to external search engines via curl.exe, but it does not disclose that user-provided queries will leave the local environment and be transmitted to third-party services. This creates a privacy and data-handling risk because users may submit sensitive terms without realizing they are being shared externally.
The script invokes an external binary via subprocess.run to perform network access, but there is no explicit disclosure in code comments, prompts, or printed warnings that an external executable will be launched. This matters because subprocess execution can affect system integrity expectations even when used for a benign purpose.
No suspicious patterns detected.