local-search
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
agentcashpackage from the NPM registry and utilizesnpx agentcash@latestto execute code fetched at runtime.\n- [COMMAND_EXECUTION]: Instructions in the skill direct the agent to execute shell commands using theagentcashCLI andnpxto perform search operations and manage wallet balances.\n- [REMOTE_CODE_EXECUTION]: The use ofnpx agentcash@latestinvolves downloading and executing remote code from the NPM registry at the time of invocation.\n- [DATA_EXFILTRATION]: The skill performs network operations tostableenrich.dev, a non-whitelisted third-party domain, which is used to proxy search queries and handle micropayments.
Audit Metadata