web-search

Fail

Audited by Socket on Mar 2, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

The skill aligns with its stated purpose: real-time web search via a local bridge and Playwright-controlled browser, yielding Markdown results. No signs of credential harvesting, hidden data exfiltration, or opaque network behavior. Privacy considerations exist due to query routing to public engines and visible browser activity, but these are expected for this use case. Overall, the security risk is moderate and primarily tied to external web interactions and browser automation, not to internal credential handling or malware.

Confidence: 95%Severity: 90%
Audit Metadata
Analyzed At
Mar 2, 2026, 01:18 PM
Package URL
pkg:socket/skills-sh/netease-youdao%2FLobsterAI%2Fweb-search%2F@a38b85e810a4d7463584db977535c43c96591a3c