Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed DeepSeek search/fetch helper that sends user queries or URLs to DeepSeek using the user's API key, with no hidden persistence or destructive behavior found.
Install only if you are comfortable sending search queries and fetch URLs to DeepSeek under your DEEPSEEK_API_KEY. Do not use it with private intranet URLs, secret-bearing query strings, or confidential material unless that third-party sharing is acceptable.
描述覆盖的能力范围明显大于代码实际实现。代码的核心能力是调用 https://api.deepseek.com/v1/tools/search 进行搜索，并可请求搜索结果中附带 content 内容；它并未实现单独的 Fetch API 调用、按 URL 直接读取页面、或站点/语言/日期等专门过滤能力。虽然 need_content 允许搜索结果包含正文，这与“搜索后返回页面正文”部分相关，但不足以支撑“读取指定 URL”“获取网页原文”“Fetch API 抓取”等更明确的声明。因此属于描述与实际行为不符，且是能力缺失型不匹配，而非存在未声明的额外危险能力。
The skill explicitly describes network access to DeepSeek APIs and use of the local DEEPSEEK_API_KEY, but it does not declare any tool scope or permissions boundary. This is dangerous because reviewers and policy systems cannot reliably constrain or audit the skill's access to environment secrets and outbound network operations, increasing the chance of unintended data exposure or overbroad execution.
This script transmits user-supplied URLs to an external DeepSeek API, which can expose sensitive internal URLs, query parameters, or private resources to a third party. In the context of a fetch skill, this is expected functionality, but it still creates a real data-exfiltration and privacy boundary that becomes dangerous if the tool is used on confidential or internal-only targets.
from deepseek_search import SearchError as FetchError, request_json
FETCH_URL = "https://api.deepseek.com/v1/tools/fetch"
def validate_url(url: str) -> None:
This code emits validation errors and command descriptions in Chinese, which forces a specific language on users without opt-in. The policy allows locale constraints only when clearly documented and justified, which is not evident here.
The exception message is presented only in Chinese, creating a language policy issue for users who may not understand it. No alternative locale handling or explicit justification for a Chinese-only interface is present in the file.
The parser description, argument help, and runtime error strings are user-visible and hardcoded in Chinese. Because the file does not offer language selection or document a justified locale restriction, this conflicts with the language/locale policy.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
from email.utils import parsedate_to_datetime
from typing import Optional
SEARCH_URL = "https://api.deepseek.com/v1/tools/search"
class SearchError(RuntimeError):
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
from email.utils import parsedate_to_datetime
from typing import Optional
SEARCH_URL = "https://api.deepseek.com/v1/tools/search"
class SearchError(RuntimeError):
This Python file contains user-facing validation errors, status messages, and CLI descriptions in Chinese only. That creates a language/locale policy issue because the skill forces one language for all users and does not offer any language choice or documented locale constraint.
No suspicious patterns detected.