yichen-unified-search

The search and data-flow design is largely proportionate and explicitly limits searches, authentication, and verification. However, the Zhihu route depends on an unverified precompiled CLI that uses Keychain credentials; this creates a high supply-chain and credential-forwarding risk. Verify the runtime’s publisher, source, and release artifacts before use, or disable that route.