Security audit
Security checks across malware telemetry and agentic risk
This appears to be a real search tool, but it bundles credentials, account/payment logic, image upload, persistence, and server-ops guidance that is broader and less tightly scoped than a normal search skill.
Install only if you trust this publisher to operate a full search web service, not just a lightweight MCP search wrapper. Review and restrict any LLM_API_KEY, LLM_BASE_URL, Cloudflare token, server deployment, OCR upload, account, and payment configuration before use; avoid running the deployment/root scripts or exposing the HTTP/SSE server unless you intend to administer the whole service. The clean VirusTotal result lowers malware concern, but it does not resolve the artifact-backed scoping and credential-handling issues.
"""通过 Camofox + 百度搜索"""
# 1. 创建 tab
tab_resp = subprocess.run([
'curl', '-s', '-X', 'POST',
f'{camofox_url}/tabs',
'-H', 'Content-Type: application/json',time.sleep(3)
# 3. 获取 snapshot
snap_resp = subprocess.run([
'curl', '-s',
f'{camofox_url}/tabs/{tab_id}/snapshot',
'-G', '--data-urlencode', 'userId=star-search'"Content-Type": "application/json"
}
)
with urllib.request.urlopen(req, timeout=LLM_TIMEOUT) as resp:
return json.loads(resp.read())
try:data=json.dumps(req_data).encode(),
headers={"Authorization": f"Bearer {LLM_API_KEY}", "Content-Type": "application/json"}
)
with urllib.request.urlopen(req, timeout=10) as resp:
return json.loads(resp.read())
try:},
)
try:
with urllib.request.urlopen(req, timeout=LLM_TIMEOUT) as resp:
data = json.loads(resp.read())
return data['choices'][0]['message']['content']
except Exception as e:64/64 vendors flagged this skill as clean.
Detected: suspicious.exposed_secret_literal