serpapi
Warn
Audited by Snyk on Apr 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly instructs the agent to scrape and parse open/public search engine results via SerpApi (e.g., curl to https://serpapi.com/search to retrieve Google, Bing, YouTube, News, Maps results), which are untrusted third-party user-generated/public web content that the agent is expected to read and could materially influence subsequent actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata