google-search

Pass

Audited by Gen Agent Trust Hub on Mar 30, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads and installs dependencies from official registries (NPM and PyPI). These packages (@aiagenta2z/onekey-gateway and ai-agent-marketplace) are owned by the skill's author, aiagenta2z.
  • [COMMAND_EXECUTION]: The skill provides instructions to run tools via the npx onekey CLI or Python scripts. These commands are used to invoke the intended search functionality through the vendor's API gateway.
  • [CREDENTIALS_UNSAFE]: The skill uses an environment variable DEEPNLP_ONEKEY_ROUTER_ACCESS for API authentication. It includes a fallback hardcoded demo key BETA_TEST_KEY_MARCH_2026 for testing purposes, which is clearly labeled as a low-privilege test key and does not expose sensitive production credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 30, 2026, 02:40 PM
Security Audit — agent-trust-hub — google-search