Security audit

Multi Search

Security checks across malware telemetry and agentic risk

Overview

This is a search-aggregation skill, but its privacy statement incorrectly says there is no external data transmission even though it sends queries to third-party search engines.

Review before installing if you may search for private, confidential, regulated, or account-related information. Treat every query as potentially sent to one or more listed search engines, and do not rely on the artifact's claim that all operations stay local.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (3)

Intent-Code Divergence

High

Confidence: 99% confidence
Finding: The skill explicitly performs outbound web requests to third-party search engines, so the claim that 'all operations run locally' and involve 'no external data transmission' is materially false. This can mislead users and downstream agents about the privacy boundary, causing sensitive queries to be sent off-device under inaccurate assurances.

Intent-Code Divergence

Medium

Confidence: 97% confidence
Finding: The document claims it does not collect or transmit personal information, but any user-supplied query may itself contain personal or sensitive data and is sent to external search providers. In addition, the documented cookie/session handling means session identifiers may be transmitted, creating a privacy and disclosure risk if users rely on the misleading statement.

Natural-Language Policy Violations

Medium

Confidence: 83% confidence
Finding: Automatically routing queries to domestic or international engines based on detected language introduces an undisclosed policy decision that can affect privacy, jurisdiction, censorship exposure, and data handling. Because the engine choice changes where user queries are sent without explicit consent, sensitive searches may be transmitted to providers the user did not intend to use.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.