smart-search-cli
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFEPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a local CLI
smart-searchfor all web research and configuration tasks, requiring the binary to be present in the user's PATH. It also features a 'Deep Research' mode where the agent generates and executes sequences of shell commands based on user queries.\n- [CREDENTIALS_UNSAFE]: The skill provides commands (smart-search config set) to manage sensitive API keys for various search providers. These are stored in local JSON configuration files. While thedoctorcommand masks secrets, other listing commands likeconfig listmay expose them in raw output.\n- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection.\n - Ingestion points: Web content is ingested via
fetchandsearchsubcommands inSKILL.md.\n - Boundary markers: Output is formatted as JSON or Markdown, but there are no explicit instructions to ignore embedded prompts in the fetched text.\n
- Capability inventory: The skill can execute various subcommands of the
smart-searchlocal binary (search,fetch,exa-search,zhipu-search,map), including multi-step 'Deep Research' orchestration.\n - Sanitization: No sanitization of external web content is mentioned before it is processed by the agent.
Audit Metadata