serpapi-cost-tuning

Pass

Audited by Gen Agent Trust Hub on Sep 11, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill utilizes the WebFetch tool to retrieve current pricing and account information directly from serpapi.com. This involves accessing official vendor endpoints such as the pricing page and the Account API.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external web sources which could theoretically contain malicious instructions. 1. Ingestion points: The skill fetches data from external SerpAPI URLs using WebFetch in SKILL.md. 2. Boundary markers: There are no explicit instructions for using delimiters to isolate the fetched web content. 3. Capability inventory: The skill has access to Read, Glob, Grep, WebFetch, Write, and Edit tools to process data and modify files. 4. Sanitization: The instructions do not specify a requirement for sanitizing or validating the content retrieved from the web before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 11, 2026, 08:41 AM
Security Audit — agent-trust-hub — serpapi-cost-tuning