Serpapi Mcp

• Analyzed: May 12, 2026, 3:09 AM
• Findings: 1
• Version: 1.1.1
• Hash: cb6eefc9a380cb23c9ddd54e43395f9c5ef3f6a21401c40a18786c0bfd43a895
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is benign. It provides a wrapper for SerpAPI searches, optionally logging results to Airtable and fetching AI overviews. All network communications are directed to legitimate SerpAPI and Airtable endpoints, aligning with the stated purpose. Sensitive API keys and tokens are correctly handled via environment variables, as explicitly documented in SKILL.md and implemented in the scripts. There is no evidence of prompt injection attempts, unauthorized data exfiltration, persistence mechanisms, or other malicious behaviors. The use of temporary files and external dependencies (`mcporter`) is standard and well-managed.