serpapi-upgrade-migration
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill fetches external documentation and release notes to guide the migration process. This content is integrated into the agent's context to generate behavior matrices.
- Ingestion points: Instruction 2 uses
WebFetchto retrieve target release notes and migration documentation from SerpAPI's GitHub repositories. - Boundary markers: The instructions do not specify the use of delimiters or explicit boundary markers when processing the fetched documentation content.
- Capability inventory: The skill uses
Bash(python3:*)andBash(npm:*)to install packages and execute tests, andWrite/Editto modify project files. - Sanitization: The skill mentions using 'sanitized fixtures' for test runs, but does not explicitly define sanitization or validation for the documentation strings retrieved via
WebFetch. - [EXTERNAL_DOWNLOADS]: The skill references and fetches information from SerpAPI's official GitHub repositories to verify package versions and retrieve migration guides. These operations target the official resources for the SerpAPI service.
- [COMMAND_EXECUTION]: The skill uses scoped shell commands to manage package installations via
npmandpython3, and to run verification tests as part of the migration workflow.
Audit Metadata