skills/varlabz/skills/searxng-search/Gen Agent Trust Hub

searxng-search

Pass

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The script scripts/search utilizes the uvx tool in its shebang to dynamically ensure the httpx package is available at runtime. This is a standard and safe method for managing Python dependencies in standalone scripts.
  • [INDIRECT_PROMPT_INJECTION]: The skill inherently processes untrusted data retrieved from the web via search results, which is a potential surface for indirect prompt injection attacks.
  • Ingestion points: The search function in scripts/search fetches external data from a SearXNG instance (defaulting to localhost or a user-provided server).
  • Boundary markers: The skill does not implement explicit boundary markers or instructions to the agent to disregard embedded commands in the search results.
  • Capability inventory: The skill is configured with shell access allowed.
  • Sanitization: The script returns raw content snippets from search engines without sanitization or filtering for instructional patterns.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 22, 2026, 09:45 AM