Google Web Search

Security checks across malware telemetry and agentic risk

Overview

This is a normal Google search skill, but failed searches can expose the user's Google API key in error output.

Review before installing. Use a restricted Google Custom Search API key with quota and billing limits, avoid searching for secrets or private personal data, and prefer a patched version that redacts HTTP error URLs before returning failures. Pin dependencies before production use.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (5)

Missing User Warnings

Medium

Confidence: 89% confidence
Finding: The skill sends user-provided search queries to Google's external API, which can expose potentially sensitive prompts or user data to a third party without any explicit warning, consent flow, or data-handling notice. In an agent setting, users may reasonably assume local processing, so silent transmission increases privacy and compliance risk.

Unpinned Dependencies

Low

Category: Supply Chain
Content: requests>=2.28.0 python-dotenv>=1.0.0
Confidence: 93% confidence
Finding: requests>=2.28.0

Unpinned Dependencies

Low

Category: Supply Chain
Content: requests>=2.28.0 python-dotenv>=1.0.0
Confidence: 92% confidence
Finding: python-dotenv>=1.0.0

Known Vulnerable Dependency: requests — 10 advisory(ies): CVE-2014-1830 (Exposure of Sensitive Information to an Unauthorized Actor in Requests); CVE-2024-47081 (Requests vulnerable to .netrc credentials leak via malicious URLs); CVE-2024-35195 (Requests `Session` object does not verify requests after making first request wi) +7 more

High

Category: Supply Chain
Confidence: 96% confidence
Finding: requests

Known Vulnerable Dependency: python-dotenv — 1 advisory(ies): CVE-2026-28684 (python-dotenv: Symlink following in set_key allows arbitrary file overwrite via )

Low

Category: Supply Chain
Confidence: 79% confidence
Finding: python-dotenv

VirusTotal

62/62 vendors flagged this skill as clean.

View on VirusTotal