grok-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill searches public web pages and X posts via a CLI tool, which ingests outsider-authored content (web search results and social media posts) that the agent actively discovers based on queries.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The installation command fetches a shell script from https://github.com/patrick-fu/grok-search-cli/releases/latest/download/install.sh and executes it via bash, meeting the criteria for remote code execution during setup/installation.