Security audit
Security checks for vulnerabilities and agentic risk
This is a small search API reference skill whose external query behavior is disclosed and aligned with its purpose.
Installers should understand that searches are sent to Presearch with a bearer API key. Do not include passwords, private prompts, customer data, or other sensitive material in search queries, and independently verify the provider's privacy claims and terms if they matter for your use case.
The documentation clearly identifies a third-party search endpoint but does not warn users that their search queries will be transmitted off-platform to an external service. In an agent context, queries may contain sensitive user data, internal prompts, or proprietary information, so the lack of an explicit disclosure increases the risk of unintended data exfiltration and privacy violations.
Defaulting to en-US is not a direct security flaw, but it can silently influence how user input is processed and transmitted without clear user awareness or consent. In privacy-sensitive agent workflows, undocumented locale defaults can create mismatches with user expectations, affect search behavior, and contribute to unnecessary disclosure of inferred regional or language preferences.
No suspicious patterns detected.
