Justserpapi Bwm

• Risk level: Low
• Analyzed: Apr 16, 2026, 5:36 PM
• Findings: 0
• Version: 1.0.0

Overview

The skill's files, requirements, and runtime instructions are consistent with a Just Serp API client for Google SERP data and the requested API key and node runtime are proportionate to that purpose.

This skill appears to be a straightforward Node-based client for Just Serp API and only needs your JUST_SERP_API_KEY. Before enabling: (1) inspect bin/run.mjs to confirm it only calls api.justserpapi.com and does not exfiltrate data elsewhere, (2) avoid giving the API key on the command line if you share the machine or other users exist (prefer passing it via environment variables or a protected secret store), (3) confirm the API key's scope and rotate it if you later remove the skill, and (4) consider the privacy/trust of Just Serp API since all queries and results go to their service.