Security audit
Neo Ddg Search Hardened
Security checks across malware telemetry and agentic risk
Overview
This is a small DuckDuckGo search helper whose network access and Python dependency match its stated purpose.
Install only if you are comfortable sending search queries to DuckDuckGo through the ddgs package. Prefer installing ddgs in a virtual environment instead of using --break-system-packages, and keep the documented rules against fetching private/internal URLs or forwarding search results to external services.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
67/67 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.