CodeQL, Semgrep and SARIF static-analysis toolkit from Trail of Bits: taint tracking, fast pattern scans and merged, deduplicated security findings for coding agents.
SerpApi Agent Usability TestSkill
Summary
A protocol for measuring whether agents can discover and use your tool without being told about it — WITH/WITHOUT trials, binary scoring, and lift as the only metric. The subject under test is your docs, not the model.
Features
- Lift (WITH minus WITHOUT) as the single metric, with the WITHOUT baseline treated as mandatory
- Five named failure modes, each pointing at a fixable part of the interface
- Isolation guidance that uses a stripped HOME, plus a check that the isolation actually held
- Randomised run order to avoid temporal confounds from rate limits and price changes
- Binary per-fact scoring with pass/fail criteria defined before the run — no rubrics, no borderline judgement
- Discovery-rate baselines by integration level, so a file-on-disk test of an MCP tool is read as a false negative
- Pre-flight checklist including an information-asymmetry check that predicts zero lift for easy tasks
- Adversarial conditions (429, timeout, malformed response, deprecated endpoint) that test error messages
Install This Skill
Add this skill to your favorite AI agent in a few steps.
Skill Content
Usage Instructions
Learn how to use this skill with different AI agents.
Example Usage
Run an agent usability test on our MCP server: design five tasks with verifiable answers, run WITH and WITHOUT across two models, and report the lift with N per cell.
Description
Everyone shipping an MCP server or a CLI for agents eventually asks the same question and answers it badly: does this work for agents? The usual test is to tell an agent about the tool and watch it succeed, which measures nothing. Agent Usability Test (AUT) is SerpApi's published protocol for measuring the thing that actually matters — whether an agent finds and uses your interface when nobody mentions it — and it is written as a runnable experimental design, not a blog post.
The premise
Give the agent a goal. Make the tool available. Say nothing about it. Observe. Run the same tasks without the tool present, and the difference — lift — is the only metric. The skill's sharpest observation is that lift is inversely proportional to model capability: strong models self-correct from API responses, so your documentation matters most for the weak ones.
Five failure modes, named
Non-discovery (never called despite being relevant), wrong selection (a worse tool wins when several are available), parameter cargo-culting (the agent copies your doc examples instead of adapting them), response-schema blindness (right call, wrong field extracted), and the auth/error cliff (a 401, 429 or timeout ends the attempt instead of triggering recovery). Each maps to something you can fix in the interface.
Methodology that survives scrutiny
The ten-step protocol is unusually strict for a vendor-published document: hypothesise before running; design tasks with binary verifiable answers; verify ground truths the same day, because stale ones produce false negatives; run a matrix of at least two models × two conditions; randomise run order, since sequential WITH-then-WITHOUT runs pick up rate limits and price changes as confounds; isolate the WITHOUT condition properly — a stripped HOME, not just a different working directory, because HOME is what loads skills in most agent CLIs — and verify the isolation by asking the agent what skills it has; observe via trace rather than self-report; score binary per fact with no 0–100 rubrics; and retest with a control, because an improvement without one could be model variance.
It also fixes discovery expectations to integration level — MCP registration ≈100%, a system-prompt hint 50–80%, a CLI on $PATH 30–50%, a file on disk 0% — so a file-on-disk test of an MCP-deployed tool is correctly called a false negative.
The parts most teams skip
A pre-flight checklist with an information-asymmetry check: if plain web search can answer your task, expect zero lift no matter how good the skill is. Sample-size guidance (N=1–3 is directional and should never be published; N=12/cell for 80% power on moderate effects). Adversarial conditions that test your error messages — 429, timeout, malformed response, deprecated endpoint — scored simply as recovered or not. And an explicit "Don't" list: no coaching the agent, no self-reported friction, no single-model tests, no significance claims below N=10.
Who it is for
Anyone publishing an agent-facing interface — MCP server, CLI, SDK or skill — who wants evidence rather than a demo. MIT licensed, version 1.0, maintained by SerpApi.
Related Skills
Microsoft's official Playwright skill — drives a real browser from the command line using accessibility snapshots and element refs, and plans, generates and heals Playwright tests.
Google's official agent skill for writing production Maps Platform code — grounded in freshly fetched docs, with a demo key path that needs no billing account.
Railway's official agent skill: create projects, provision databases and buckets, deploy, manage variables and domains, and read build failures back — from the CLI, API or MCP server.