web-search-engine

• Analyzed: Mar 26, 2026, 3:01 PM
• Findings: 1
• Version: 1.0.0
• Hash: 7034041b62ef758172b4eb0a4b8e1019faee92c89e5f3b6a0fd12f27feb2493b
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is a legitimate web search utility that scrapes results from major search engines (Baidu, Bing, 360, and Sogou). The code in `search.js` uses the built-in Node.js fetch API to retrieve search results and implements basic regex-based HTML parsing to return text to the agent; there is no evidence of data exfiltration, malicious command execution, or prompt injection in `SKILL.md`.