Taizi Brave Search

• Analyzed: May 11, 2026, 6:51 AM
• Findings: 1
• Version: 1.0.0
• Hash: 7b0639b46bb1c49abff13026b9f33f2771ca8044e45e414a3cc5318e941bc705
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides legitimate web search and content extraction functionality using Brave Search and standard libraries like @mozilla/readability and jsdom. While SKILL.md claims to use the Brave Search API and requests a BRAVE_API_KEY, the implementation in search.js actually scrapes the public Brave Search web interface; however, this is a functional discrepancy rather than a security threat. There is no evidence of data exfiltration, malicious command execution, or prompt injection.