freeUnlimited-websearch
Warn
Audited by Socket on Feb 26, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
This skill is consistent with its stated purpose: it delegates web searching to the ddgs Python package and returns search results. There is no explicit malicious behavior in the supplied documentation. The primary supply-chain risk is the installation of the third-party ddgs package from PyPI and the placeholder git clone instruction (which could lead users to clone untrusted forks). Best practice before enabling: review the actual search.py and the ddgs package source code (and pin a vetted ddgs release or vendor the dependency) and use a trusted repository URL. Overall risk is low-to-moderate due to standard supply-chain concerns rather than any explicit malicious functionality.
Confidence: 80%Severity: 75%
Audit Metadata