brave-search
Audited by Runlayer on Feb 21, 2026
Malicious tool definition detected
Tool: .gitignore
Malicious tool definition detected
Tool: SKILL.md Description: --- name: brave-search description: Web search and content extraction via Brave Search API.
Malicious tool definition detected
Tool: content.js Description: #!/usr/bin/env node import { Readability } from "@mozilla/readability"; import { JSDOM } from "jsdom"; import TurndownService from "turndown"; import { gfm } from "turndown-plugin-gfm"; const url = process.argv[2]; if (!url) { console.log("Usage: content.js <url>"); console.log(" Extracts readable content from a webpage as markdown."); console.log(" Examples:"); console.log(" content.js https://example.com/article"); console.log(" content.js https://doc.rust-lang.
Malicious tool definition detected
Tool: package-lock.json [1/2]
Tool: package-lock.json [2/2]
Malicious tool definition detected
Tool: package.json Description: { "name": "brave-search", "version": "1.0.0", "type": "module", "description": "Headless web search via Brave Search - no browser required", "author": "Mario Zechner",
Malicious tool definition detected
Tool: search.js Description: #!/usr/bin/env node import { Readability } from "@mozilla/readability"; import { JSDOM } from "jsdom"; import TurndownService from "turndown"; import { gfm } from "turndown-plugin-gfm"; const args = process.argv.slice(2); const contentIndex = args.indexOf("--content"); const fetchContent = contentIndex !== -1; if (fetchContent) args.splice(contentIndex, 1); let numResults = 5; const nIndex = args.indexOf("-n"); if (nIndex !== -1 && args[nIndex + 1]) { numResults = pa