Trust Assessment
kagi-search received a trust score of 49/100, placing it in the Untrusted category. This skill has significant security findings that require attention before use in production.
SkillShield's automated analysis identified 3 findings: 1 critical, 1 high, 1 medium, and 0 low severity. Key findings include Persistence / self-modification instructions, Suspicious import: urllib.request, Hardcoded paths for API key retrieval from .env files.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings3
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| CRITICAL | Persistence / self-modification instructions Shell RC file modification for persistence Remove any persistence mechanisms. Skills should not modify system startup configurations, crontabs, LaunchAgents, systemd services, or shell profiles. | Manifest | skills/silversteez/kagi-search/scripts/kagi-search.py:25 | |
| HIGH | Hardcoded paths for API key retrieval from .env files The `get_api_key` function attempts to retrieve the `KAGI_API_KEY` by reading from hardcoded absolute paths: `/home/matt/clawd/.env` and `/home/matt/.clawdbot/.env`. This practice constitutes a **credential harvesting** risk, as it explicitly seeks sensitive information from specific file locations. It also represents **excessive permissions** by attempting to access files outside the skill's immediate working directory or standard environment variable lookup. If these files exist and are readable by the process executing the skill, they could expose other secrets or sensitive configuration data beyond the Kagi API key. Remove hardcoded absolute paths for `.env` file lookup. Rely solely on environment variables (e.g., `os.environ.get("KAGI_API_KEY")`) for credential retrieval. If `.env` file support is necessary, use a dedicated library like `python-dotenv` which typically searches for `.env` files in the current working directory or specified relative paths, rather than absolute user-specific paths. | LLM | scripts/kagi-search.py:37 | |
| MEDIUM | Suspicious import: urllib.request Import of 'urllib.request' detected. This module provides network or low-level system access. Verify this import is necessary. Network and system modules in skill code may indicate data exfiltration. | Static | skills/silversteez/kagi-search/scripts/kagi-search.py:15 |
Scan History
Embed Code
[](https://skillshield.io/report/588edf6c199718b5)
Powered by SkillShield