The search box reflects your input. A secret flag is hidden somewhere in the page.
Trigger an XSS payload to reveal it — or just look harder.