serpapi-common-errors
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill defines a structured methodology for classifying and recovering from SerpAPI failures, emphasizing local fixes and idempotent retries.
- [DATA_EXPOSURE]: The instructions mandate security best practices for handling sensitive credentials, specifically ordering that the
SERPAPI_KEYbe excluded from exceptions, captured URLs, and shared evidence. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external data from the SerpAPI service, which involves an inherent risk of indirect prompt injection.
- Ingestion points: The skill captures HTTP status, response error text, and search metadata status from external API calls (SKILL.md).
- Boundary markers: No explicit delimiters or instructions to ignore embedded commands are specified for the ingested API response data.
- Capability inventory: The skill utilizes
Bash(python3:*),WebFetch,Write, andEdittools (SKILL.md). - Sanitization: The instructions require redacting request metadata and creating sanitized regression fixtures to mitigate data exposure and potential injection risks.
Audit Metadata