Install
$ agentstack add skill-serpapi-skills-agent-usability-test ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Give agent a goal. Make tool available. Don't mention the tool. Observe. Run WITHOUT baseline. Delta = lift — the only metric that matters. Lift is inversely proportional to model capability: docs matter most for weak models; strong models self-correct from API responses.
Failure modes
| # | Failure | Signal | |---|---------|--------| | 1 | Non-discovery | Tool never called despite being available and relevant | | 2 | Wrong selection | Agent picks suboptimal tool when multiple are available | | 3 | Parameter cargo-culting | Agent copies doc examples instead of adapting | | 4 | Response-schema blindness | Correct call, wrong field extracted | | 5 | Auth/error cliff | 401/429/timeout → agent gives up instead of recovering |
Discovery by integration level
MCP tool registered ~100% (in agent's tool list)
System prompt hint ~50-80% (estimate)
CLI on $PATH ~30-50% (N=4)
File on disk 0% (N=12, 4 models)
Test at your deployment level. File-on-disk test for MCP-deployed tool = false negative.
Protocol
- Hypothesize. State expected outcome before running. Fisher's exact for N<20.
- Design tasks with verifiable answers (binary: correct/incorrect). Don't encode methodology in the prompt.
- Verify ground truths same-day. Query the source yourself before running trials. Stale GTs produce false negatives.
- Run matrix. ≥2 models × 2 conditions (WITH/WITHOUT). Uncoached prompt: "Answer this: [GOAL]. Cite your source."
- Randomize run order. Shuffle all (model, task, condition, trial) tuples. Sequential runs introduce temporal confounds (API rate limits, model load, price changes).
- Isolate WITHOUT completely. HOME controls skill/extension loading in most agent CLIs — don't just set CWD=/tmp. Create a stripped HOME with agent auth config but no skills directory, no extensions. Tool off PATH. No env vars. Verify: ask the WITHOUT agent "what skills do you have?" — if it names your tool, isolation failed. If it names your tool despite correct isolation, that's training-data contamination — note it, don't fix it.
- Competition variant (FM#2): Give ALL competing tools simultaneously. Score which gets picked. Three conditions: YOURS-ONLY, ALL-TOOLS, NONE.
- Observe via trace — not self-report. Metrics: discovery rate, selection rate, efficiency (calls to correct answer), recovery rate, lift.
- Score binary per fact. Automated substring or exact match. No 0-100 rubrics. No human judgment on borderline cases (define pass/fail criteria before running).
- Fix → Retest with control. Fix docs, not agent. Run old-docs AND new-docs agents in same session — without a control, improvement could be model variance.
Adversarial conditions (tests your error messages, not agent intelligence)
- 429 rate limit: retry with backoff or give up?
- Network timeout: fall back or fail silently?
- Malformed response: handle unexpected JSON shape?
- Deprecated endpoint: find current one from error message?
Score: binary (recovered / didn't).
Don't
- Coach the agent ("use this tool") — tests reading, not behavior
- Ask agents to self-report friction
- Test one model only
- Skip the WITHOUT baseline
- Use 0-100 rubric scores
- Claim significance at N<10
- Score with stale ground truths (verify same-day)
- Run WITHOUT from the repo directory (AGENTS.md leaks tool names)
- Run all WITH then all WITHOUT sequentially (randomize)
- Report behavioral observation ("used the tool") as score data ("correct answer")
Sample size
N=1-3/cell → directional only (never publish) · N=10/cell → Fisher's exact, large effects · N=12/cell → 80% power, moderate effects · Always report N per cell, not total runs
Pre-flight checklist (run before committing to full matrix)
- [ ] GTs verified same-day via the tool itself (not from memory/training data)
- [ ] Pilot: 1 run WITH — agent discovers and uses the tool? If not, fix infra.
- [ ] Pilot: 1 run WITHOUT — agent has zero awareness of tool? If not, fix isolation.
- [ ] Information asymmetry check: can web search answer this task? If yes, expect 0pp lift regardless of skill quality. Test with 1 WITHOUT run — if correct, the task is too easy.
- [ ] Scoring function matches GT format (comma-separated numbers, decimal points, currency symbols)
- [ ] Error rate <10% in pilot (rate limits, auth failures, timeouts)
- [ ] Questions span ≥3 engines/capabilities (not all the same difficulty)
Not this
| Approach | Tests | Subject | |----------|-------|---------| | WebBench/WebArena | Can agent complete web tasks? | Agent capability | | API-Bank/ToolBench | Can agent follow API specs? | Agent tool-use skill | | UXAgent/UXCascade | Is web UI usable for humans? | Human-facing interface | | Search API benchmarks | Which API gives better results? | API output quality | | AUT | Can agents discover and use it? | Agent-facing interface |
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: serpapi
- Source: serpapi/skills
- License: MIT
- Homepage: https://serpapi.com/
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.