serpapi
Pass
Audited by Gen Agent Trust Hub on May 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the official Membrane CLI from the npm registry using
npm install -g @membranehq/cli@latest. This is a vendor-provided tool required for the skill's functionality. - [COMMAND_EXECUTION]: Uses the
membraneCLI to perform operations such as login, connection management, and running search actions. These commands involve shell execution to interact with the platform infrastructure. - [CREDENTIALS_UNSAFE]: Security best practices are followed by leveraging a centralized connection manager for SerpApi authentication, which avoids the need for hardcoded keys or local secret storage within the agent environment.
- [SAFE]: The skill's behavior is consistent with its stated purpose, and all external dependencies and CLI tools originate from the primary vendor's official and recognized infrastructure.
Audit Metadata