skills/brave/brave-search-skills/bx/Gen Agent Trust Hub

bx

Pass

Audited by Gen Agent Trust Hub on Apr 8, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill includes an installation command that fetches a script from 'https://raw.githubusercontent.com/brave/brave-search-cli/main/scripts/install.sh'. This source is the official repository of the skill's author ('brave').\n- [REMOTE_CODE_EXECUTION]: The installation process involves piping the downloaded script directly into a shell ('| sh'). While this pattern is often flagged, it is used here for the legitimate distribution of the vendor's official CLI tool.\n- [COMMAND_EXECUTION]: The skill operates by invoking the 'bx' binary to perform web searches, RAG grounding, and data synthesis. This is the primary intended behavior of the skill.\n- [CREDENTIALS_UNSAFE]: The documentation provides explicit instructions for secure API key management, recommending the use of interactive configuration commands ('bx config set-key') to prevent keys from being stored in shell history files.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 8, 2026, 10:29 PM