Zhipu AI Search

• Analyzed: May 12, 2026, 4:24 AM
• Findings: 1
• Version: 1.0.1
• Hash: 7285491947e7f7f9a201b09df61e459ef20b5811e3f0b25f8b40a15eeff4c729
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is designed for web searching via the Zhipu AI API. The `search_util.py` script correctly uses `httpx` to make API calls, passing user inputs as JSON payload data, which prevents shell or command injection. API keys are securely handled via environment variables. The `SKILL.md` and `README.md` files provide clear, benign instructions without any prompt injection attempts. Permissions in `.claude/settings.json` are appropriate for executing a Python script. No evidence of data exfiltration, malicious execution, or persistence was found.