Security audit
You.com Web Search & Research API
Security checks across malware telemetry and agentic risk
Overview
This skill is a straightforward You.com API integration guide with disclosed API-key and network use, and no evidence of hidden or destructive behavior.
Install this if you intend to build against You.com APIs. Keep YDC_API_KEY in environment or secret storage, do not commit it, review generated code and dependency installs, and treat returned web content as untrusted before rendering it or feeding it to an agent.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.