Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed SerpAPI search helper whose network use, API key requirement, and optional location configuration fit its stated purpose.
Install this only if you are comfortable sending search terms, selected engine parameters, and any explicit or configured default location to SerpAPI. Do not use it for sensitive internal queries or private addresses unless that disclosure is acceptable, and keep SERPAPI_API_KEY scoped to this service.
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
def get_api_key() -> str:
"""Get API key from environment."""
key = os.environ.get("SERPAPI_API_KEY")
if not key:
print("Error: SERPAPI_API_KEY environment variable not set", file=sys.stderr)
The skill advertises capabilities that include environment-variable access, file reads, and network use, but it does not declare an explicit tool scope such as permissions or allowed-tools. That makes the runtime trust boundary unclear and increases the risk of over-privileged execution, especially for a skill that sends user-supplied queries to an external API and may read workspace configuration like TOOLS.md.
The description is broad enough to match many ordinary search-related prompts, which can cause the skill to trigger in contexts where users did not intend third-party API usage. In practice, that can lead to unnecessary transmission of user queries, including potentially sensitive search terms or location-related requests, to an external service.
The setup and usage text encourages passing search queries and location values to SerpAPI but does not clearly warn that this data is sent to a third-party service. Because the skill supports local searches and explicit location parameters, users may unknowingly disclose sensitive interests, addresses, or geolocation-related information externally.
The skill reads local workspace files (including a path influenced by the CLAWDBOT_WORKSPACE environment variable) to infer a default location, which exceeds the minimal capability needed to perform a search query. This can expose contextual data from local files to the tool and then onward to the external SerpAPI service when used as a fallback, creating unnecessary data access and potential privacy leakage.
The code sends the user query and optional location directly to SerpAPI over the network without any runtime notice, consent prompt, or clear indication in output that third-party transmission is occurring. In an agent setting, users may reasonably assume local processing, so this creates a privacy risk, especially for sensitive searches or inferred location data.
No suspicious patterns detected.