ai-search-hub
Run the AI Search Hub browser automation scripts for Yuanbao, LongCat, Doubao, Qwen, Gemini, Grok, and MiniMax. Use this skill when the user wants to ask one of those sites a prompt, auto-start or attach to a Chrome DevTools session on port 9222, seed an isolated debug browser profile from the user's local browser data, detect whether login is required, wait for the user to finish logging in if needed, and then continue automatically.
72
88%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
In `scripts/run_web_chat.py` → `scripts/site_chat_core.py` (and legacy site scripts like `scripts/doubao_playwright.py`), outsider-authored free text is ingested at runtime by reading the chat UI DOM (e.g., `item.inner_text(...)` / `page.locator(...).inner_text(...)`) from the provider pages after navigation to sites such as `https://www.doubao.com/chat/?channel=sysceo&from_login=1`.
- Repository
- minsight-ai-info/AI-Search-Hub
- Path
SKILL.md
- Commit
afcc741
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.