Stealthy Google Search

• Risk level: Low
• Analyzed: Feb 23, 2026, 8:25 PM
• Findings: 0
• Version: 0.1.0

Overview

The skill's code, instructions, and installer are coherent with its stated purpose (running stealthy Google searches via Scrapling); it requires installing Scrapling and Playwright browsers but does not request unrelated credentials or perform obvious exfiltration.

This skill appears to do what it says, but exercise caution before running the installer: 1) The included install.sh will create a .venv, install a third-party package (scrapling) from PyPI, and run 'scrapling install' which downloads Playwright browsers and may invoke sudo to install system dependencies — review the scrapling project (https://github.com/D4Vinci/Scrapling) and its install steps first. 2) Because the installer may run with sudo -E (preserves environment), avoid running it in an environment with sensitive env vars present, or sanitize them first. 3) Prefer running the installer in an isolated environment (container or VM) if you are unsure. 4) If you want to avoid sudo, install Playwright/system deps manually and run the scrapling install step as your user. 5) If you need higher assurance, inspect the scrapling package source and the scrapling CLI's install behavior before proceeding.