curl-search Audit report.

Warnings

• Financial research output is not financial advice; require human review before any live investment decision
• The script uses python3 -c with string interpolation, which could be a command injection risk if input sanitization is ever bypassed or fails.
• The sed command with \x{4e00}-\x{9fff} is a GNU extension and may not work on BSD/macOS, potentially breaking the skill on darwin systems.
• The script does not handle curl errors or network failures gracefully, which could lead to confusing output or hangs.
• Financial research output is not financial advice; require human review before any live investment decision.
• Quality score needs review
• Stars/forks activity: 300 stars, 17 forks; issue activity unavailable in current metadata

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.