Security audit
Neo Ddg Search Hardened
Security checks for vulnerabilities and agentic risk
Overview
This is a small DuckDuckGo search helper whose network access and Python dependency match its stated purpose.
Install only if you are comfortable sending search queries to DuckDuckGo through the ddgs package. Prefer installing ddgs in a virtual environment instead of using --break-system-packages, and keep the documented rules against fetching private/internal URLs or forwarding search results to external services.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.