Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed LangSearch API integration that sends search queries and the LangSearch API key only to the documented LangSearch API endpoint.
Install only if you are comfortable sending your search queries, reranking documents, and LangSearch API key to LangSearch over HTTPS. Keep the API key in an environment variable and avoid using the skill for confidential queries unless LangSearch's data handling terms meet your needs.
Credentials or environment variables flow to a network sink. This is a high-confidence indicator of credential exfiltration.
for attempt in range(max_retries):
try:
response = requests.post(url, headers=headers, json=payload, timeout=30)
if response.status_code == 200:
return response.json()
The skill performs network requests and uses an environment credential, but it does not declare an explicit tool scope such as permissions or allowed-tools. This creates a policy and review gap: an agent may be able to invoke broader capabilities than the skill contract clearly communicates, increasing the chance of unintended credential use or outbound requests.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
"summary": True
}
response = requests.post(
"https://api.langsearch.com/v1/web-search",
headers=headers,
json=payload
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
"summary": True
}
response = requests.post(
"https://api.langsearch.com/v1/web-search",
headers=headers,
json=payload
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
"summary": True
}
response = requests.post(
"https://api.langsearch.com/v1/web-search",
headers=headers,
json=payload
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
"summary": True
}
response = requests.post(
"https://api.langsearch.com/v1/web-search",
headers=headers,
json=payload
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
"summary": True
}
response = requests.post(
"https://api.langsearch.com/v1/web-search",
headers=headers,
json=payload
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
"summary": True
}
response = requests.post(
"https://api.langsearch.com/v1/web-search",
headers=headers,
json=payload
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
"summary": True
}
response = requests.post(
"https://api.langsearch.com/v1/web-search",
headers=headers,
json=payload
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
"summary": True
}
response = requests.post(
"https://api.langsearch.com/v1/web-search",
headers=headers,
json=payload
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
"summary": True
}
response = requests.post(
"https://api.langsearch.com/v1/web-search",
headers=headers,
json=payload
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
"summary": True
}
response = requests.post(
"https://api.langsearch.com/v1/web-search",
headers=headers,
json=payload
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
"summary": True
}
response = requests.post(
"https://api.langsearch.com/v1/web-search",
headers=headers,
json=payload
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Or using cURL:
curl -X POST https://api.langsearch.com/v1/web-search \
-H "Authorization: Bearer $LANGSEARCH_API_KEY" \
-H "Content-Type: application/json" \
-d '{
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
]
# Rerank for better relevance
rerank_response = requests.post(
"https://api.langsearch.com/v1/rerank",
headers=headers,
json={
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
if freshness:
payload["freshness"] = freshness
url = "https://api.langsearch.com/v1/web-search"
for attempt in range(max_retries):
try:
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
if freshness:
payload["freshness"] = freshness
url = "https://api.langsearch.com/v1/web-search"
for attempt in range(max_retries):
try:
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
if freshness:
payload["freshness"] = freshness
url = "https://api.langsearch.com/v1/web-search"
for attempt in range(max_retries):
try:
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
if freshness:
payload["freshness"] = freshness
url = "https://api.langsearch.com/v1/web-search"
for attempt in range(max_retries):
try:
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
if freshness:
payload["freshness"] = freshness
url = "https://api.langsearch.com/v1/web-search"
for attempt in range(max_retries):
try:
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
if freshness:
payload["freshness"] = freshness
url = "https://api.langsearch.com/v1/web-search"
for attempt in range(max_retries):
try:
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
if freshness:
payload["freshness"] = freshness
url = "https://api.langsearch.com/v1/web-search"
for attempt in range(max_retries):
try:
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
if freshness:
payload["freshness"] = freshness
url = "https://api.langsearch.com/v1/web-search"
for attempt in range(max_retries):
try:
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
if freshness:
payload["freshness"] = freshness
url = "https://api.langsearch.com/v1/web-search"
for attempt in range(max_retries):
try:
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
if freshness:
payload["freshness"] = freshness
url = "https://api.langsearch.com/v1/web-search"
for attempt in range(max_retries):
try:
No suspicious patterns detected.