GLM Search Pro

v1.2.5

Web search via Zhipu GLM — supports both MCP (mcporter) and cURL (REST API) backends. Provides multi-engine search (Pro, Sogou, Quark, Std) with intent recog...

0· 88·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for bithostgits/glm-search-pro.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "GLM Search Pro" (bithostgits/glm-search-pro) from ClawHub.
Skill page: https://clawhub.ai/bithostgits/glm-search-pro
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required env vars: ZHIPU_API_KEY
Required binaries: curl, python3
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install glm-search-pro

ClawHub CLI

Package manager switcher

npx clawhub@latest install glm-search-pro
Security Scan
Capability signals
Requires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description (GLM web search) matches what the files and SKILL.md do: call Zhipu REST API via curl or use mcporter MCP broker. Declared binaries (curl, python3) and required env var (ZHIPU_API_KEY) are appropriate for the stated functionality.
Instruction Scope
SKILL.md and scripts only access the declared ZHIPU_API_KEY and use curl/python3. MCP setup writes a mcporter config that embeds the API key as a URL query parameter (necessary for the MCP SSE broker); this is documented and optional. The skill also documents adding ZHIPU_API_KEY to a systemd service environment, which is outside the script itself but is a reasonable operational requirement for gateway processes. No instructions attempt to read unrelated files or exfiltrate data.
Install Mechanism
No remote install/downloads or third‑party packages are pulled by an automated install step. The skill is instruction-only with local scripts; setup.sh and glm-search.sh are included in the bundle. There is no use of obscure URLs or installers.
Credentials
Only ZHIPU_API_KEY is required, which is proportional to contacting Zhipu's API. The notable privacy/security consequence is that MCP mode persists the key into ~/.openclaw/config/mcporter/mcporter.json (as a query param) and SKILL.md suggests storing it in systemd unit environment for the Gateway process — both are practical but increase the attack surface if the host is shared. The skill documents file permissions (600/700) and recommends cURL mode (no on-disk key) when possible.
Persistence & Privilege
The skill does write its own config file only in MCP setup and sets restrictive permissions; it does not request always:true and does not modify other skills. The only persistence is its own mcporter config and recommendations to add the env var to Gateway service units (user action).
Assessment
This skill appears to be what it says: a Zhipu GLM web-search helper. If you want minimal exposure, use the default cURL mode (the script reads ZHIPU_API_KEY from environment at runtime and does not write it to disk). Only run setup.sh if you need MCP mode; setup.sh will persist the API key into ~/.openclaw/config/mcporter/mcporter.json (it sets 600/700 permissions) because the MCP broker requires the key in the URL. If you must store the key for Gateway use, be aware that placing it in systemd unit files or persistent config stores plaintext credentials — consider service account limits, host access controls, and rotating the key if the host is shared. Review and run the included scripts locally before installing, and avoid running them with elevated privileges.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

Binscurl, python3
EnvZHIPU_API_KEY
latestvk978nzfmt3fqbaxvf2msk7f98s85p7mg
88downloads
0stars
8versions
Updated 10h ago
v1.2.5
MIT-0

GLM Search Pro

Web search powered by Zhipu GLM, with dual-backend support: cURL (REST API, preferred) and MCP (via mcporter).

Credentials

This skill requires a Zhipu API key, provided via the ZHIPU_API_KEY environment variable.

cURL mode (preferred)

No setup required. The key is read from $ZHIPU_API_KEY at runtime and sent via HTTP Authorization: Bearer header. In cURL mode, no files are written to disk.

MCP mode (advanced)

If you need MCP mode, setup.sh will write a config file to disk:

FileWhat it containsPermissions
~/.openclaw/config/mcporter/mcporter.jsonMCP server URL with API key as query param600 (owner-only)
~/.openclaw/config/mcporter/ directoryParent directory700 (owner-only)

Important: The Zhipu MCP broker endpoint requires the API key as a URL query parameter (Authorization=<key>). This is how their SSE endpoint works — the key cannot be passed via HTTP header for MCP connections. Setup writes this to mcporter.json with 600 permissions. If this is not acceptable, use cURL mode only (which passes the key via Authorization header at runtime and writes nothing to disk).

What this skill reads

SourceWhenPurpose
$ZHIPU_API_KEY env varEvery search (cURL mode), and during setup (MCP mode)API key

Recommendation

For maximum security, use cURL mode and skip setup.sh. MCP mode is provided as a convenience but requires persisting the key on disk due to the Zhipu MCP broker's authentication design.

Quick Start

# Set your API key
export ZHIPU_API_KEY="your-api-key"

# Search (cURL mode, no setup needed)
bash scripts/glm-search.sh "your query"

# With options
bash scripts/glm-search.sh -q "latest AI news" -c 20 -r oneWeek -e quark

Backends

The script auto-selects the best available backend:

  1. cURL mode (preferred) — curl + ZHIPU_API_KEY env var. Key sent via HTTP header. Nothing written to disk.
  2. MCP mode (advanced) — mcporter + config from setup.sh. Key stored in config file for MCP broker auth.

Force a specific mode with --curl or --mcp.

Search Engines

EngineFlagBest For
Pro-e proGeneral purpose, best quality (default)
Quark-e quarkAdvanced scenarios, Chinese content
Sogou-e sogouChina domestic content
Std-e stdBasic search, Q&A

Parameters

FlagLongDefaultDescription
-q--querySearch text (required, ≤70 chars recommended)
-c--count10Number of results (1-50)
-e--enginepropro, sogou, quark, std
-r--recencynoLimitnoLimit, oneYear, oneMonth, oneWeek, oneDay
-s--sizemediummedium (400-600 chars) or high (up to 2500)
-i--intentoffEnable search intent recognition (cURL only)
-d--domainRestrict results to specific domain
--curlForce cURL backend
--mcpForce MCP backend

Examples

# Basic search (cURL mode auto-selected)
glm-search "OpenClaw framework"

# Recent news, more results
glm-search -q "AI news" -c 20 -r oneWeek

# Chinese content via Sogou
glm-search -q "最新科技新闻" -e sogou -r oneDay

# Domain-specific search
glm-search -q "Python async" -d docs.python.org

# Intent recognition (cURL only)
glm-search -i "What is machine learning"

Response Format

{
  "id": "task-id",
  "created": 1704067200,
  "search_result": [
    {
      "title": "Page Title",
      "content": "Page summary...",
      "link": "https://example.com",
      "media": "Source Name",
      "refer": "ref_1",
      "publish_date": "2026-04-27"
    }
  ]
}

Architecture

glm-search (script)
├── cURL mode (preferred)
│   └── curl + $ZHIPU_API_KEY → Authorization: Bearer header → Zhipu REST API
└── MCP mode (advanced, requires setup)
    └── mcporter → config from setup.sh → Zhipu MCP Broker SSE endpoint

Setup (MCP mode only)

export ZHIPU_API_KEY="your-api-key"
bash scripts/setup.sh

This is only needed for MCP mode. cURL mode works immediately with ZHIPU_API_KEY set.

Configuring the API Key for OpenClaw Gateway

The skill requires ZHIPU_API_KEY to be available in the Gateway process environment. If openclaw skills check shows △ needs setup for this skill, the key is missing.

Systemd (Linux, recommended)

If the Gateway runs as a systemd user service:

# Edit the service override
systemctl --user edit openclaw-gateway

# Add the following in the editor:
[Service]
Environment=ZHIPU_API_KEY=your-api-key-here

# Then reload and restart
systemctl --user daemon-reload
systemctl --user restart openclaw-gateway

Or create the file manually:

mkdir -p ~/.config/systemd/user/openclaw-gateway.service.d
cat > ~/.config/systemd/user/openclaw-gateway.service.d/override.conf << 'EOF'
[Service]
Environment=ZHIPU_API_KEY=your-api-key-here
EOF
systemctl --user daemon-reload
systemctl --user restart openclaw-gateway

Docker / manual

Set the environment variable before starting the Gateway:

export ZHIPU_API_KEY="your-api-key-here"

Or add it to your .env / docker-compose.yml as appropriate.

Verify

After restarting, confirm the skill is ready:

openclaw skills check
# Should show: ✓ glm-search-pro (no longer "needs setup")

Prerequisites

  • Zhipu API keyhttps://open.bigmodel.cn (set as ZHIPU_API_KEY env var)
  • curl — pre-installed on most systems
  • python3 — used by setup.sh for JSON config generation
  • mcporter (optional, for MCP mode) — npm i -g mcporter (invoked via npx)

Troubleshooting

See references/api-notes.md for detailed API reference and common issues.

Comments

Loading comments...