Kiro Search Aggregator

• Outcome: Pass
• Latest audit: May 28, 2026, 6:00 AM
• Version:
  1.0.0

Overview

This is a disclosed search aggregation skill that sends chosen search queries to external search APIs and saves local result files as part of its stated purpose.

Install only if you are comfortable sending your search terms to Serper, SerpAPI, and X when those sources are selected. Avoid sensitive internal, personal, regulated, or secret-bearing queries, omit credentials for providers you do not intend to use, and review or delete the generated latest.json and latest.md files when results may contain private information.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (3)

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The skill sends user-supplied queries to multiple third-party services (Serper, SerpAPI, X) and writes result files locally, but the description does not warn users about this data flow. In a search aggregation context, queries may contain sensitive research topics, internal project names, or personal data, so silent transmission and persistence increase privacy and compliance risk.

Missing User Warnings

Medium

• Confidence: 94% confidence
• Finding: The script persists the raw search query and aggregated third-party results to disk by default in JSON and Markdown files. Queries can contain sensitive user intent or personal data, and the saved result set may include externally sourced content that should not be retained without clear disclosure, consent, or retention controls.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The skill transmits the user-provided query to multiple third-party services (Serper, SerpAPI, and X) to perform aggregation. This creates a privacy and data-governance risk because potentially sensitive queries are disclosed externally without any built-in notice, consent gate, or restriction on query content.

VirusTotal

55/55 vendors flagged this skill as clean.