brave-search

Warn

Audited by Runlayer on Feb 21, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
6
Flagged
5
Chunks
7
Flagged Files (5)
SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md Description: --- name: brave-search description: Web search and content extraction via Brave Search API.

content.jsHIGH
78.3%

Malicious tool definition detected

Tool: content.js Description: #!/usr/bin/env node import { Readability } from "@mozilla/readability"; import { JSDOM } from "jsdom"; import TurndownService from "turndown"; import { gfm } from "turndown-plugin-gfm"; const url = process.argv[2]; if (!url) { console.log("Usage: content.js <url>"); console.log(" Extracts readable content from a webpage as markdown."); console.log(" Examples:"); console.log(" content.js https://example.com/article"); console.log(" content.js https://doc.rust-lang.

package-lock.jsonHIGH
78.3%

Malicious tool definition detected

Description: { "name": "brave-search", "version": "1.0.0", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "brave-search", "version": "1.0.0", "license": "MIT", "dependencies": { "@mozilla/readability": "^0.6.0", "jsdom": "^27.0.1", "turndown": "^7.2.2", "turndown-plugin-gfm": "^1.0.2" } }, "node_modules/@asamuzakjp/css-color": { "version": "4.1.0", "resolved": "https://registry.npmjs.org/@asamuzakjp/css-color/-/css-color-4.1.0.tgz", "integrity": "sha512-9xiBAtLn4aNsa4mDnpovJ

Description: "version": "4.0.0", "resolved": "https://registry.npmjs.org/whatwg-mimetype/-/whatwg-mimetype-4.0.0.tgz", "integrity": "sha512-QaKxh0eNIi2mE9p2vEdzfagOKHCcj1pJ56EEHGQOVxp8r9/iszLUUV7v89x9O1p/T+NlTM5W7jW6+cz4Fq1YVg==", "license": "MIT", "engines": { "node": ">=18" } }, "node_modules/whatwg-url": { "version": "15.1.0", "resolved": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-15.1.0.tgz", "integrity": "sha512-2ytDk0kiEj/yu90JOAp44PVPUkO9+jVhyf+SybKlRHSDlvOOZhdPIrr7xTH64l4WixO2cP

package.jsonHIGH
78.3%

Malicious tool definition detected

Tool: package.json Description: { "name": "brave-search", "version": "1.0.0", "type": "module", "description": "Headless web search via Brave Search - no browser required", "author": "Mario Zechner",

search.jsHIGH
78.3%

Malicious tool definition detected

Tool: search.js Description: #!/usr/bin/env node import { Readability } from "@mozilla/readability"; import { JSDOM } from "jsdom"; import TurndownService from "turndown"; import { gfm } from "turndown-plugin-gfm"; const args = process.argv.slice(2); const contentIndex = args.indexOf("--content"); const fetchContent = contentIndex !== -1; if (fetchContent) args.splice(contentIndex, 1); let numResults = 5; const nIndex = args.indexOf("-n"); if (nIndex !== -1 && args[nIndex + 1]) { numResults = pa

Passed Files (1)Click to expand
.gitignoreOK
4.4%

Tool passed security scan

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
6
Files Flagged
5
Chunks Analyzed
7
Analyzed
Feb 21, 2026, 01:24 AM
Security Audit — runlayer — brave-search