icon-retrieval

Warn

Audited by Runlayer on Feb 22, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
2
Flagged
2
Chunks
2
Flagged Files (2)
SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md Description: --- name: icon-retrieval description: Search and retrieve icon SVG strings from icon library.

scripts/search.jsHIGH
78.3%

Malicious tool definition detected

Tool: scripts/search.js Description: #!/usr/bin/env node async function searchIcons(query, topK = 5) { const params = new URLSearchParams({ text: query, topK: topK.toString() }); const apiUrl = `https://www.weavefox.cn/api/open/v1/icon?${params}`; const response = await fetch(apiUrl); if (!response.ok) { const text = await response.text(); throw new Error(`HTTP ${response.status}: ${text}`); } const data = await response.json(); if (!data.status || !data.data?.success) { throw new Error(data.mes

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
2
Files Flagged
2
Chunks Analyzed
2
Analyzed
Feb 22, 2026, 11:02 AM
Security Audit — runlayer — icon-retrieval