Realtime Web Search

• Analyzed: May 11, 2026, 7:00 AM
• Findings: 1
• Version: 1.0.1
• Hash: 388ecac8b78b69be4f46baa5f8602355896c61dec0d05f842f5ece496967c130
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is a legitimate wrapper for Baidu's Qianfan web search and summarization APIs. The code in `scripts/search.py` correctly handles authentication via environment variables and communicates only with official Baidu endpoints (qianfan.baidubce.com). No evidence of data exfiltration, malicious execution, or prompt injection was found.