serper-search
Warn
Audited by Snyk on Feb 28, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The SKILL.md defines a serper_search tool that performs live web searches via the Google Serper API (serper.dev) and the example workflows (see the "AI 行为" search calls and replies like "根据搜索结果") show the agent fetching and interpreting open/public web content (untrusted/user-generated pages) that can materially influence its outputs and actions.
Audit Metadata