doubao-websearch

Warn

Audited by Socket on Jun 24, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's purpose and local execution are mostly coherent, and installs are low-risk, but it sends both search queries and the required API key through RedFoxHub as an intermediary rather than a directly verifiable official Doubao endpoint. Because the specific claimed endpoints could not be independently confirmed in public docs, the data-flow trust model is only partially verifiable.

Confidence: 86%Severity: 56%
Audit Metadata
Analyzed At
Jun 24, 2026, 09:53 AM
Package URL
pkg:socket/skills-sh/redfox-data%2Fredfox-community%2Fdoubao-websearch%2F@f1e512da6b89991810ae0c14b8dc72f2295313dcd838d5218417b95f640a821e
Security Audit — socket — doubao-websearch