Bailian Web Search Hardened

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:41 PM UTC
• Version:
  1.0.0

Overview

This is a disclosed Alibaba Bailian web-search helper that uses a DashScope API key and does not show hidden persistence, local data harvesting, or destructive behavior.

Install only if you are comfortable sending search queries to Alibaba Cloud using your DashScope API key. Keep queries generic, do not include secrets or private personal or business details, protect the API key, and avoid large repeated searches because quota controls are mostly documented rather than enforced by the script.

SkillSpector

By NVIDIA

Vulnerability Patterns

• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 90% confidence
• Finding: The skill invokes shell scripts and external binaries (`bash`, `curl`, `jq`) but does not declare explicit permissions for shell/code execution. That mismatch can weaken platform trust boundaries because an agent or reviewer may treat the skill as lower-risk than it actually is, while it still has the ability to make outbound requests and process untrusted input through the shell. In this context the danger is elevated because the skill is specifically a web-search tool that sends user-supplied queries to a third-party API, creating both command-execution and data-exfiltration exposure if the runtime permission model is not transparent.

VirusTotal

66/66 vendors flagged this skill as clean.