serpapi
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill makes requests to
serpapi.com, which is a well-known and established service for search engine results scraping. These network operations are intended for the skill's primary function of retrieving travel data. - [CREDENTIALS_UNSAFE]: The skill demonstrates safe practices by instructing that the
SERPAPI_API_KEYshould be stored in a.envfile, avoiding hardcoded secrets within the instructions or scripts. - [COMMAND_EXECUTION]: The documentation includes
curlcommand examples to illustrate how to interact with the API. These commands are benign examples for the user to understand the tool's integration and do not involve suspicious execution patterns. - [OBFUSCATION]: The skill uses standard URL encoding for a JSON parameter in one of its examples (
multi_city_json). This is a standard web practice for passing structured data in a URL and is clearly documented with its decoded counterpart, presenting no security risk.
Audit Metadata