multi-search
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates as a legitimate search aggregator, directing traffic only to established and well-known services like DuckDuckGo, Microsoft Bing, and Tavily.
- [SAFE]: Credential management is handled securely; the skill retrieves API keys from environment variables or a local JSON file, which prevents the exposure of sensitive secrets within the code itself.
- [SAFE]: The
WebContentFetcherclass inmulti_search.pyperforms essential sanitization by removing<script>and<style>tags from fetched HTML content, which helps protect the agent from indirect prompt injection or malicious scripts. - [SAFE]: Local file operations are limited to the skill's own directory for caching network status and managing API quotas, with no evidence of unauthorized access to sensitive system paths.
Audit Metadata