Scan Report
5 /100
groundapi_web_researcher
Deep web research assistant — search, scrape, and synthesize information from multiple sources into a structured report. Powered by GroundAPI MCP tools.
This is a legitimate web research assistant skill that uses GroundAPI MCP tools for searching and scraping web content. All declared capabilities match the documented functionality with no hidden or suspicious behavior.
Safe to install
This skill is safe to use. No security concerns identified.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Network | READ | READ | ✓ Aligned | Uses info_search and info_scrape MCP tools for web content retrieval |
| Environment | READ | READ | ✓ Aligned | Requires GROUNDAPI_KEY env var, declared in metadata |
| Filesystem | NONE | NONE | — | No file operations required or performed |
| Shell | NONE | NONE | — | No shell commands or subprocess calls found |
| Clipboard | NONE | NONE | — | No clipboard access detected |
| Browser | NONE | NONE | — | Uses MCP tools for web scraping, not direct browser access |
| Database | NONE | NONE | — | No database access required or present |
| Skill Invoke | READ | READ | ✓ Aligned | This is a skill itself, naturally requires skill_invoke |
2 findings
Medium External URL 外部 URL
https://groundapi.net SKILL.md:9 Medium External URL 外部 URL
https://mcp.groundapi.net/sse SKILL.md:29 File Tree
1 files · 3.1 KB · 117 lines Markdown 1f · 117L
└─
SKILL.md
Markdown
Security Positives
✓ All capabilities are explicitly declared in metadata
✓ No scripts or executable code - purely documentation
✓ Credential requirement (GROUNDAPI_KEY) is clearly documented
✓ No hidden functionality or suspicious patterns (no base64, eval, subprocess)
✓ Network access is declared and essential for the stated web research purpose
✓ No credential harvesting or exfiltration detected
✓ Clear output format documentation prevents injection risks