Local web search using SearXNG

• Analyzed: May 14, 2026, 3:08 AM
• Findings: 1
• Version: 1.0.0
• Hash: 4d3e00c0eeb11aacfd3b4375969658046bbcc335f6b5e7dec2320209a2dfb22b
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is designed to perform web searches using a self-hosted SearXNG instance. The Python script (`searxng_search.py`) correctly implements this by reading the user-defined `SEARXNG_URL` environment variable and making HTTP requests to it. There is no evidence of data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms, or prompt injection attempts in the `SKILL.md` or code. All actions are aligned with the stated purpose of providing a privacy-respecting web search.