Security audit
Security checks across malware telemetry and agentic risk
This is a disclosed multi-provider web search and extraction plugin; its main risks are expected third-party query/URL sharing and local API-key config handling, not hidden malicious behavior.
Install only if you are comfortable with search queries, domain filters, and extraction URLs being sent to the providers you configure. For confidential work, avoid broad auto/research routing or restrict providers, keep Keenable public mode and private URL extraction disabled unless explicitly needed, and handle setup-generated API-key JSON files as secrets.
SkillSpector was not run because this plugin release contains no bundled skills.
62/62 vendors flagged this plugin as clean.
Detected: suspicious.install_untrusted_source
"description": "Loopback-only Hound Streamable HTTP MCP endpoint, exactly http://127.0.0.1:<port>/mcp or http://[::1]:<port>/mcp."
