Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward Alibaba Cloud IQS search helper that sends user-provided searches to Alibaba using the configured API key.
Install only if you intend to use Alibaba Cloud IQS for web search. Treat every search query as data sent to Alibaba Cloud, avoid submitting secrets or confidential internal information, and prefer setting ALI_IQS_API_KEY as an environment variable rather than relying on a project .env file.
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
}
// 然后尝试读取.env文件
const envPath = path.join(process.cwd(), '.env');
if (fs.existsSync(envPath)) {
const envContent = fs.readFileSync(envPath, 'utf8');
const match = envContent.match(/ALI_IQS_API_KEY\s*=\s*(.+)/);
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
}
// 然后尝试读取.env文件
const envPath = path.join(process.cwd(), '.env');
if (fs.existsSync(envPath)) {
const envContent = fs.readFileSync(envPath, 'utf8');
const match = envContent.match(/ALI_IQS_API_KEY\s*=\s*(.+)/);
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
}
}
throw new Error('ALI_IQS_API_KEY not found in environment or .env file');
}
async function search(query) {
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
}
}
throw new Error('ALI_IQS_API_KEY not found in environment or .env file');
}
async function search(query) {
The skill declares that it requires an environment variable and performs networked search, but it does not declare an explicit tool scope such as permissions or allowed-tools. This weakens least-privilege controls and reduces transparency for users and hosting platforms about what the skill can access and do.
The skill describes a search feature but does not clearly warn that user queries are transmitted to Alibaba Cloud's third-party IQS service. Users may unknowingly send sensitive prompts, internal identifiers, or proprietary data to an external provider, creating privacy, compliance, and data-handling risk.
The file contains multiple user-facing comments and console messages in Chinese, including status output and usage-related text, with no indication that the skill is intentionally region-specific or that users can opt into another language. This creates a natural-language locale policy issue because the script implicitly requires Chinese comprehension for effective use.
The script sends the user-supplied query and a bearer-authenticated request to a third-party cloud search API, but it provides no explicit notice that input will leave the local environment or that an API key will be used. In an agent-skill context, this can cause unintended disclosure of sensitive prompts, internal data, or operator expectations about offline/local execution.
The README documents the need for an Alibaba Cloud API key and describes a networked search feature, but it does not explicitly warn that user search queries are sent to Alibaba Cloud's external UnifiedSearch API. This creates a transparency and privacy risk because operators or end users may unknowingly transmit sensitive terms, internal identifiers, or personal data to a third-party service.
The phrase "支持中文搜索优化" indicates a language-specific behavior, but the README does not clarify whether the skill is limited to Chinese use cases, optional, or configurable. Under the policy rule, forcing or implicitly constraining language/locale behavior without user opt-in or clear justification can be a natural-language policy violation.
Several instructional comments are written only in Chinese, while other user-facing text is in English. This creates a language accessibility inconsistency and can amount to a locale/language policy issue when the skill does not offer a language choice or document that it is intentionally region-specific.