serpapi-rate-limits
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill fetches data from external SerpAPI endpoints, creating a vulnerability surface where malicious data could potentially influence the agent's behavior.
- Ingestion points: External account and search status data is retrieved from serpapi.com via the WebFetch tool.
- Boundary markers: The instructions do not define specific delimiters or instructions to ignore potential commands embedded in the API responses.
- Capability inventory: The skill has access to Bash(python3:*), Write, and Edit tools, which could be targeted by an injection attack.
- Sanitization: There is no description of sanitization or validation for the incoming API data beyond basic type conversion.
- [DYNAMIC_EXECUTION]: The skill utilizes Python scripts to implement rate-limiting logic and simulate traffic loads.
- Evidence: The tool instructions and examples involve generating and running Python scripts via the Bash tool to manage admission budgets.
- Context: The scripts are intended for internal mathematical calculations and load management based on API usage metrics.
Audit Metadata