searxng-search

Warn

Audited by Snyk on May 17, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md and scripts/search.py explicitly call a SearXNG instance (via SEARXNG_URL or --url) to fetch JSON search results/snippets from the open web (including social media), which the agent ingests and displays as part of its workflow and could therefore influence subsequent decisions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
May 17, 2026, 07:34 PM
Issues
1
Security Audit — snyk — searxng-search