ai-overview-tracking
Track presence in Google AI Overviews (AIO) and Google AI Mode for target keywords via SearchApi. Use when the user mentions "AI Overview", "AI Overviews", "AIO tracking", "AIO monitoring", "am I in Google AI", "am I cited by Google AI", "AI mode", "Google AI mode", "SGE", "generative search", "S...
Install this skill
or
78/100
Security score
The ai-overview-tracking skill was audited on Aug 6, 2026 and we found 6 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
low line 96
Command substitution pattern
SourceSKILL.md
| 94 | ```bash |
| 95 | # 1. One google call. If the body is inline, you are done. |
| 96 | RESP=$(curl -s "https://www.searchapi.io/api/v1/search?engine=google&q=best+serp+api&gl=us&hl=en&api_key=$SEARCHAPI_API_KEY") |
| 97 | printf '%s' "$RESP" | jq '{has_aio:(.ai_overview!=null), inline_refs:(.ai_overview.reference_links|length), page_token:(.ai_overview.page_token // null)}' |
| 98 |
low line 100
Command substitution pattern
SourceSKILL.md
| 98 | |
| 99 | # 2. Token shape: reference_links empty but a page_token is present. Chain within ~60s. |
| 100 | TOKEN=$(printf '%s' "$RESP" | jq -r 'if (.ai_overview.reference_links|length)>0 then empty else (.ai_overview.page_token // empty) end') |
| 101 | if [ -n "$TOKEN" ]; then |
| 102 | curl -s "https://www.searchapi.io/api/v1/search?engine=google_ai_overview&page_token=$TOKEN&api_key=$SEARCHAPI_API_KEY" \ |
medium line 87
Curl to non-GitHub URL
SourceSKILL.md
| 85 | |
| 86 | ```bash |
| 87 | curl -s "https://www.searchapi.io/api/v1/search?engine=google&q=best+serp+api&gl=us&hl=en&api_key=$SEARCHAPI_API_KEY" \ |
| 88 | | jq '{has_aio: (.ai_overview != null), |
| 89 | refs: (.ai_overview.reference_links // [] | map({title, link, source}))}' |
medium line 96
Curl to non-GitHub URL
SourceSKILL.md
| 94 | ```bash |
| 95 | # 1. One google call. If the body is inline, you are done. |
| 96 | RESP=$(curl -s "https://www.searchapi.io/api/v1/search?engine=google&q=best+serp+api&gl=us&hl=en&api_key=$SEARCHAPI_API_KEY") |
| 97 | printf '%s' "$RESP" | jq '{has_aio:(.ai_overview!=null), inline_refs:(.ai_overview.reference_links|length), page_token:(.ai_overview.page_token // null)}' |
| 98 |
medium line 102
Curl to non-GitHub URL
SourceSKILL.md
| 100 | TOKEN=$(printf '%s' "$RESP" | jq -r 'if (.ai_overview.reference_links|length)>0 then empty else (.ai_overview.page_token // empty) end') |
| 101 | if [ -n "$TOKEN" ]; then |
| 102 | curl -s "https://www.searchapi.io/api/v1/search?engine=google_ai_overview&page_token=$TOKEN&api_key=$SEARCHAPI_API_KEY" \ |
| 103 | | jq '{markdown, text_blocks, reference_links: (.reference_links // [] | map({index, title, link, source}))}' |
| 104 | else |
medium line 112
Curl to non-GitHub URL
SourceSKILL.md
| 110 | |
| 111 | ```bash |
| 112 | curl -s "https://www.searchapi.io/api/v1/search?engine=google_ai_mode&q=best+serp+api&api_key=$SEARCHAPI_API_KEY" \ |
| 113 | | jq '{markdown, references: .reference_links, web: (.web_results // [])}' |
| 114 | ``` |
Scanned on Aug 6, 2026
View Security Dashboard