Agent Economy ReportAgent Economy ReportCAUTION version 2.1.3 · audited 2026-09-17
This is a documentation-only skill that instructs an AI agent to run web searches across 16 third-party search engines using web_fetch. It does not contain executable code, file operations, persistence, or credential harvesting. It directs the agent to send user search terms to external engines and, when access is denied, to fetch engine homepages to collect fresh session cookies. A security notice claims all operations run locally with no external data transmission, which contradicts the documented web_fetch behavior. Because search queries can expose private information and the cookie-retrieval step may work around access controls, installers should review before use; no clear malicious exfiltration was found.
| Declared purpose | Multi search engine integration with 16 engines (7 CN + 9 Global). Supports advanced search operators, time filters, site search, privacy engines, and WolframAlpha knowledge queries. No API keys required. |
| Observed behavior | The skill is a set of Markdown instructions and examples. It directs the agent to build URLs for 16 search engines, call web_fetch, add delays, batch requests, include browser headers, acquire session cookies on 403/429 from engine homepages, retry, and aggregate results. No actual executable code or local data storage is included. |
| Verdict, rules only | SAFE |
| Verdict, AI | CAUTION |
| Final verdict | CAUTION (never better than either pass) |
| capability | vs purpose | detail |
|---|---|---|
| network | needed | Directs web_fetch calls to 16 external search engines; search terms and request metadata are sent to third-party domains. |
| other | needed | Directs in-memory cookie acquisition from search engine homepages after access denial; no disk persistence is specified. |
| severity | finding |
|---|---|
| info | Declared purpose Describes the skill as a multi-search-engine integration with no API keys required. SKILL.md:3 description: "Multi search engine integration with 16 engines (7 CN + 9 Global). Supports advanced search operators, time filters, site search, privacy engines, |
| info | Network search via web_fetch The skill instructs the agent to make network requests using web_fetch to query search engines. SKILL.md:16 3. **Controlled Search**: Use web_fetch to execute search requests with rate limiting: |
| info | External search URL configured The configuration contains external search engine URL templates; the listed engines cover many third-party domains. config.json:6 "url": "https://www.baidu.com/s?wd={keyword}", |
| medium | Cookie acquisition after access denial Instructs the agent to fetch engine homepages to obtain fresh session cookies when a search is blocked. This can work around anti-bot controls and may violate search engine terms of service. SKILL.md:20 - If access is denied (403/429), fetch engine homepage to obtain fresh session cookies |
| medium | Third-party data exposure The publisher acknowledges that search terms are sent to third-party search engines and may expose sensitive information. skill-card.md:25 Risk: Search terms are sent to third-party search engines, which may expose private, internal, regulated, or identifying information. |
| medium | Inaccurate local execution claim The security notice claims all operations run locally with no external data transmission, but the skill is built around sending queries to external search engines. SKILL.md:153 - **Local Execution**: All operations run locally, no external data transmission |
| low | Sensitive search operator The advanced operator example searches for password text in txt files, which could be used to find exposed sensitive files. references/international-search.md:24 | `intext:` | 正文包含 | `intext:password filetype:txt` | |
0 AI finding(s) were dropped because their file, line or quote did not match the package.
| domain | service rating | where |
|---|---|---|
| baike.baidu.com | not in the service index | references/advanced-search.md:144 |
| clawhub.ai | not in the service index | skill-card.md:9 |
| cn.bing.com | not in the service index | SKILL.md:37 |
| duckduckgo.com | not in the service index | CHANNELLOG.md:42 |
| help.sogou.com | not in the service index | references/advanced-search.md:146 |
| m.sm.cn | not in the service index | SKILL.md:42 |
| news.baidu.com | not in the service index | references/advanced-search.md:11 |
| scholar.google.com | not in the service index | references/international-search.md:59 |
| search.brave.com | not in the service index | SKILL.md:50 |
| search.yahoo.com | not in the service index | SKILL.md:48 |
| sogou.com | not in the service index | SKILL.md:40 |
| webcache.googleusercontent.com | not in the service index | references/international-search.md:89 |
| www.baidu.com | not in the service index | SKILL.md:36 |
| www.ecosia.org | not in the service index | SKILL.md:51 |
| www.google.com | not in the service index | CHANNELLOG.md:39 |
| www.google.com.hk | not in the service index | SKILL.md:46 |
| www.qwant.com | not in the service index | SKILL.md:52 |
| www.so.com | not in the service index | SKILL.md:39 |
| www.sogou.com | not in the service index | references/advanced-search.md:100 |
| www.startpage.com | not in the service index | SKILL.md:49 |
| www.wolframalpha.com | not in the service index | SKILL.md:53 |
| wx.sogou.com | not in the service index | SKILL.md:41 |
| xueshu.baidu.com | not in the service index | references/advanced-search.md:10 |
| Binaries invoked | base64, docker, npm, python |
| Environment variables read | none |
| Hard-coded wallets | none |
| Pipes a download to a shell | 0 |
| eval / exec / subprocess | 0 |
| base64 blobs | 0 |
| File writes | 0 |
| Persistence | 0 |
| file | lines | sha256 |
|---|---|---|
CHANGELOG.md | 18 | 5514ba8a17f4dd66… |
CHANNELLOG.md | 48 | e5a45aa16ad78fb2… |
SKILL.md | 154 | a089b7928eeff57c… |
_meta.json | 6 | 63809973f94802bc… |
config.json | 85 | e134d2a4543fefb4… |
metadata.json | 7 | b5986a0ccad61087… |
references/advanced-search.md | 146 | e01db27db827d9d0… |
references/international-search.md | 398 | 4f16b64f43678943… |
skill-card.md | 51 | cbc87481998be682… |
For agents
JSON: https://agenteconomy.report/k/multi-search-engine.audit.json · badge: https://agenteconomy.report/k/multi-search-engine.audited.svg ·
skill rating: /k/multi-search-engine · commission an audit of any skill: US$ 29 per version.
The complete published package of this exact version was downloaded from the registry and read statically; nothing was executed. A deterministic pass extracts network destinations, binaries, environment variables, writes, install commands, obfuscation markers, subprocesses and wallets, each with file and line. An AI then reads the whole package with those facts and writes the summary, the capabilities and the findings under a strict schema; every finding it produces must cite a file, a line and the exact text, or it is dropped. The final verdict is the worst of the two passes. The audit does not change the skill's trust tier (policy); the author may respond through the dispute channel and the response is published here. Commissioned by: the Agent Economy Report (free program: the 150 most downloaded skills, September 2026).