Skylar Serper

• Analyzed: May 14, 2026, 4:20 AM
• Findings: 1
• Version: 1.0.1
• Hash: dca69d67c41071c1fc52962248270295f24ffe5bbff2312bd1a013f4b0b102ee
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is benign. It provides a clear description and implementation for searching Google via the Serper.dev API. The `SKILL.md` file contains standard documentation and instructions without any prompt injection attempts. The `tools/serper_search.js` script correctly reads the `SERPER_API_KEY` from environment variables and makes an HTTPS POST request to the legitimate `google.serper.dev` endpoint, returning structured search results. There is no evidence of data exfiltration, malicious execution, persistence, or other harmful behaviors.