Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward local web-search connector for SearXNG with disclosed local-network use and no evidence of hidden, destructive, persistent, or credential-seeking behavior.
Install this only if you intend the agent to send search queries to a local SearXNG service on localhost:8080. Confirm that port is running the expected service, and expect the agent to use the tool for broad current-information, documentation, and fact-checking requests.
The manifest describes the function as "Search the web and return results," which is a very general activation description without constraints, scope limits, or exclusion conditions. In a manifest file, this kind of broad wording can overlap with many ordinary requests and makes it unclear when the skill should activate versus other tools.
Code issues a request to a loopback, link-local, or private-range host. This can reach internal services not meant to be exposed and is a common SSRF pivot.
data = json.load(sys.stdin)
query = data.get("query","")
r = requests.get(
"http://localhost:8080/search",
params={"q": query, "format": "json"},
timeout=10
The usage guidance says the agent should call this tool for broad needs like 'verify facts from external sources' and 'gather links for further reading,' which overlap with many ordinary tasks. The description does not provide explicit constraints or negative examples clarifying when web search should not be invoked.
No suspicious patterns detected.