锋哥智能搜索

• Risk level: Low
• Analyzed: Feb 18, 2026, 7:22 PM
• Findings: 0
• Version: 1.0.0

Overview

The skill's code and instructions match its stated purpose (scraping Bing for Chinese and DuckDuckGo for English); it requests no secrets and has no suspicious external endpoints, though there is a small metadata/instruction inconsistency about the 'requests' dependency.

This skill appears to do what it says: a small Python scraper that chooses Bing for Chinese queries and DuckDuckGo for English. Before installing/using: 1) Note the author/homepage are unknown—there's limited provenance. 2) Ensure the runtime has Python3 and the 'requests' package installed (SKILL.md incorrectly lists 'requests' as a binary); the maintainer should either declare a pip install step or fix metadata. 3) The script performs HTML scraping with regex (fragile) and makes outbound HTTP requests to cn.bing.com and html.duckduckgo.com—no other endpoints are contacted and no secrets are requested. 4) If you run this in an environment with sensitive data or strict network policies, test with non-sensitive queries first or run in a sandbox. 5) Review/scan the included skill.py yourself if you need stronger assurance (it’s short and readable).