serpapi-cost-tuning
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes the
WebFetchtool to retrieve current pricing and account information directly fromserpapi.com. This involves accessing official vendor endpoints such as the pricing page and the Account API. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external web sources which could theoretically contain malicious instructions. 1. Ingestion points: The skill fetches data from external SerpAPI URLs using
WebFetchinSKILL.md. 2. Boundary markers: There are no explicit instructions for using delimiters to isolate the fetched web content. 3. Capability inventory: The skill has access toRead,Glob,Grep,WebFetch,Write, andEdittools to process data and modify files. 4. Sanitization: The instructions do not specify a requirement for sanitizing or validating the content retrieved from the web before processing.
Audit Metadata