Corpus RAG & KG Search

• Risk level: Low
• Analyzed: May 10, 2026, 3:39 PM
• Findings: 0
• Version: 1.0.1
• Hash: 36140c06969dd6d678922e7c4ef9cd5b2f925b44c2101be3000a35249e381497

Overview

The plugin matches its RAG/KG search purpose, but it handles API secrets unsafely by showing them plainly and documenting plain-HTTP credential use.

Install only if you trust the corpus API and package source. Replace any sample keys, prefer an HTTPS endpoint, inspect the flagged http.js credential handling, avoid sensitive queries until transport/security is confirmed, and rotate credentials that were printed or copied from the examples.