SerpApi Flights (Google Flights)
PassAudited by ClawScan on May 10, 2026.
Overview
This skill appears to do what it says: it queries SerpApi for Google Flights data using a SerpApi API key, with no evidence of hidden persistence, destructive actions, or unrelated data access.
Before installing, confirm you are comfortable providing a SerpApi API key and having searches consume your SerpApi quota. The provided code appears scoped to flight lookups and does not show hidden file access, persistence, or unrelated network destinations.
Findings (1)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Your SerpApi key will be used to make flight-search API requests, which may consume your SerpApi quota.
The skill reads a SerpApi credential from the environment and includes it in the request to the SerpApi API. This is sensitive credential use, but it is purpose-aligned and disclosed.
const API_KEY = process.env.SERPAPI_KEY || process.env.SERPAPI_API_KEY || ''; ... api_key: API_KEY
Use a SerpApi key intended for this purpose, monitor quota usage, and avoid sharing logs or environments that expose the key.