search1api

Warn

Audited by Socket on Sep 4, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s capabilities mostly match its stated purpose, and the installer/CLI appear to be official Search1API distribution paths. The main risks are the official but unsafe `curl|bash` installer, runtime `npx` execution, transitive installation of learned skills, and prompt-injection exposure from untrusted web content combined with file-writing. No clear credential exfiltration, covert behavior, or malicious mismatch is evident.

Confidence: 86%Severity: 54%
Audit Metadata
Analyzed At
Sep 4, 2026, 04:52 PM
Package URL
pkg:socket/skills-sh/superagents-lab%2Fsearch1api-cli%2Fsearch1api%2F@c87eb679d4121a6b9508bfc96fd26a1dfa707eded4c667383bd6ac9adf679b56
Security Audit — socket — search1api