searxng
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a utility for searching the web via a locally hosted SearXNG instance. The implementation uses standard network communication patterns targeting
localhostand relies on Python's built-in libraries. - [EXTERNAL_DOWNLOADS]: The skill's deployment instructions reference the official SearXNG Docker image from Docker Hub and its source repository on GitHub. These are well-known and expected resources for the skill's intended purpose.
- [INDIRECT_PROMPT_INJECTION]: The search tool processes untrusted data from the web (search results). While this creates an ingestion surface for indirect prompt injection, the tool is a passive information retriever and does not provide dangerous capabilities that could be triggered by external content. (Severity: SAFE)
- [CREDENTIALS_SAFE]: The configuration instructions correctly advise the user to generate a random secret key for the local service rather than providing a hardcoded one.
Audit Metadata