Nimble Web Search

• Analyzed: May 12, 2026, 3:14 AM
• Findings: 1
• Version: 0.1.0
• Hash: b9c88aa86ebd30c0d45aaecc64d8f561afae93528fdf96fe11d0123fd20815fd
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is a wrapper for the Nimble Search API. It requires a user-provided API key (`NIMBLE_API_KEY`) which it sends to the hardcoded `https://nimble-retriever.webit.live/search` endpoint via `curl` in `scripts/search.sh` and `scripts/validate-query.sh`. This behavior is explicitly documented and aligned with the skill's stated purpose. The `SKILL.md` contains directives to the agent to ensure proper configuration and usage of the skill, which are not malicious prompt injection attempts. No evidence of data exfiltration beyond the necessary API key for the service, malicious execution, persistence, or obfuscation was found. The use of `curl` is integral to the skill's function and not indicative of malicious intent in this context.