search1api
Warn
Audited by Socket on Sep 4, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s capabilities mostly match its stated purpose, and the installer/CLI appear to be official Search1API distribution paths. The main risks are the official but unsafe `curl|bash` installer, runtime `npx` execution, transitive installation of learned skills, and prompt-injection exposure from untrusted web content combined with file-writing. No clear credential exfiltration, covert behavior, or malicious mismatch is evident.
Confidence: 86%Severity: 54%
Audit Metadata