deshell - the web & search in markdown

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:13 PM UTC
• Version:
  1.5.0

Overview

This skill does what it says: it lets an agent fetch web pages and search through the DeShell proxy, with privacy and package-provenance caveats.

Install only if you are comfortable with requested URLs, search terms, fetched content, and the DeShell API key being handled by the DeShell service. Verify the @deshell/mcp npm package before installing, prefer a scoped or disposable API key, and do not use DESHELL_EXTRA_HEADERS for secrets, internal auth headers, private-network URLs, regulated data, or confidential research unless you trust the proxy or self-host it.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (2)

Missing User Warnings

Medium

• Confidence: 89% confidence
• Finding: The README encourages sending arbitrary URLs and search queries through a third-party proxy service but does not clearly disclose that those requests, along with associated metadata such as IP address, headers, and timing information, will be transmitted to DeShell infrastructure. In an agent setting, this is more dangerous because agents may forward sensitive internal URLs, private research queries, or other confidential data without the operator realizing the privacy and data-handling implications.

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: The skill explicitly instructs agents to send arbitrary URLs, search queries, screenshots, rendered pages, raw content requests, and optional extra headers through a third-party proxy, but it does not warn that these inputs and the API key are transmitted to DeShell infrastructure. In an agent context, this can cause sensitive URLs, internal documentation links, search terms, header values, or browsing targets to be exfiltrated off-system without operator awareness, especially because the skill presents the proxy as a convenience layer and even supports custom headers.

VirusTotal

65/65 vendors flagged this skill as clean.