search-web

The fragment appears to be a legitimate MCP and CLI setup script, not overt malware. It does not contain clear persistence beyond intentionally configuring API keys, data theft, destructive behavior, or remote-control logic. The principal risks are supply-chain exposure from executing unpinned npm @latest packages, plaintext and URL-based API-key handling, possible credential leakage through command/configuration output, and incomplete shell-value escaping. Review and preferably pin and verify package versions, avoid placing secrets in URLs or printed configuration, and safely quote or validate persisted secrets before use.

该内容是 MCP/search-web 安装与配置文档，不包含直接恶意代码。主要风险来自秘密以 URL 和持久化环境变量形式保存、远程 MCP 信任边界，以及使用 npm/npx 的 latest 可变版本自动执行第三方包。建议固定并审计依赖版本，校验包来源与完整性，避免将密钥嵌入 URL，使用安全的秘密存储，并限制 MCP 进程权限。