Is whyhit2005/zhipu-web-search safe?
Yes. whyhit2005/zhipu-web-search is safe to install. Oathe's behavioral security audit gave the zhipu-web-search skill by whyhit2005 a trust score of 91/100 with 3 findings, none critical or high.
https://clawhub.ai/whyhit2005/zhipu-web-search
Is whyhit2005/zhipu-web-search safe to install?
This skill provides legitimate web search functionality through Zhipu AI's API with standard argument processing and HTTP requests. The implementation is straightforward with no evidence of malicious behavior, prompt injection, or data exfiltration attempts.
What security issues were found in whyhit2005/zhipu-web-search?
Category Scores
Findings (3)
LOW Contains executable shell script -15 ▶
The skill includes a bash script that processes arguments and makes curl requests to external APIs. While this is necessary for the skill's functionality, it does represent executable code.
LOW Makes external API calls -10 ▶
The skill makes HTTP requests to open.bigmodel.cn API endpoint as part of its documented web search functionality. This is expected behavior but represents external data transmission.
INFO Depends on external Chinese API service -15 ▶
The skill relies on Zhipu AI's web search service hosted in China. While legitimate, users should be aware of the external dependency and data jurisdiction.
Should I install whyhit2005/zhipu-web-search?
Oathe's verdict for whyhit2005/zhipu-web-search is SAFE with a trust score of 91/100. Recommendation: Install.