brave-search

Warn

Audited by Runlayer on Feb 21, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
6
Flagged
6
Chunks
7
Flagged Files (6)
.gitignoreHIGH
78.3%

Malicious tool definition detected

Tool: .gitignore

SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md Description: --- name: brave-search description: Web search and content extraction via Brave Search API.

content.jsHIGH
78.3%

Malicious tool definition detected

Tool: content.js Description: #!/usr/bin/env node import { Readability } from "@mozilla/readability"; import { JSDOM } from "jsdom"; import TurndownService from "turndown"; import { gfm } from "turndown-plugin-gfm"; const url = process.argv[2]; if (!url) { console.log("Usage: content.js <url>"); console.log(" Extracts readable content from a webpage as markdown."); console.log(" Examples:"); console.log(" content.js https://example.com/article"); console.log(" content.js https://doc.rust-lang.

package-lock.jsonHIGH
78.3%

Malicious tool definition detected

Tool: package-lock.json [1/2]

Tool: package-lock.json [2/2]

package.jsonHIGH
78.3%

Malicious tool definition detected

Tool: package.json Description: { "name": "brave-search", "version": "1.0.0", "type": "module", "description": "Headless web search via Brave Search - no browser required", "author": "Mario Zechner",

search.jsHIGH
78.3%

Malicious tool definition detected

Tool: search.js Description: #!/usr/bin/env node import { Readability } from "@mozilla/readability"; import { JSDOM } from "jsdom"; import TurndownService from "turndown"; import { gfm } from "turndown-plugin-gfm"; const args = process.argv.slice(2); const contentIndex = args.indexOf("--content"); const fetchContent = contentIndex !== -1; if (fetchContent) args.splice(contentIndex, 1); let numResults = 5; const nIndex = args.indexOf("-n"); if (nIndex !== -1 && args[nIndex + 1]) { numResults = pa

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
6
Files Flagged
6
Chunks Analyzed
7
Analyzed
Feb 21, 2026, 09:23 PM
Security Audit — runlayer — brave-search