grok-search
Warn
Audited by Snyk on Feb 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The grok-search skill issues web_search and web_fetch requests against arbitrary public URLs and platforms (e.g., GitHub, Reddit) via GrokSearchProvider in scripts/groksearch_cli.py, returning fetched webpage content/JSON that the agent is expected to read and synthesize, which exposes it to untrusted third-party content.
Audit Metadata