Serpapi
v1.0.0SerpApi integration. Manage data, records, and automate workflows. Use when the user wants to interact with SerpApi data.
⭐ 0· 49·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name and description say 'SerpApi integration' and the SKILL.md exclusively documents using the Membrane CLI to connect to SerpApi, discover actions, run them, or proxy raw requests. Required network access and a Membrane account are consistent with that purpose; no unrelated credentials or system access are requested.
Instruction Scope
Instructions focus on installing and using the Membrane CLI, creating a connector/connection to SerpApi, listing and running actions, and proxying requests. The instructions do not ask the agent to read unrelated files, pull other credentials, or exfiltrate data to unexpected endpoints. They do instruct interactive login flows (browser-based or headless token completion), which is expected for establishing the connection.
Install Mechanism
There is no registry-level install spec (skill is instruction-only), but the SKILL.md tells users/agents to install the Membrane CLI via 'npm install -g @membranehq/cli' (or use npx). Installing a public npm CLI is a common pattern and reasonable for this integration, but global npm installs write to disk and run code from the npm registry — users should verify the package and source before installing.
Credentials
The skill declares no required environment variables or local credentials. SKILL.md explicitly instructs to let Membrane manage API keys/tokens server-side and not to request user API keys locally, which is proportionate to the stated function.
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system-wide configs, and requires no config paths. The default autonomous invocation setting is present but not coupled with broad privileges or credential access.
Assessment
This skill is instruction-only and appears to do what it says: use the Membrane CLI to connect to SerpApi. Before installing or running it: (1) verify the @membranehq/cli package and its GitHub/homepage are legitimate and up-to-date; (2) be aware that 'npm install -g' installs a global CLI that will write files to disk — install in a controlled environment if you prefer; (3) the login flow opens a browser or requires pasting a code, so do not paste sensitive unrelated secrets there; and (4) understand Membrane will hold and proxy your SerpApi credentials server-side, so review Membrane's privacy and security posture if you trust it to manage those credentials.Like a lobster shell, security has layers — review code before you run it.
latestvk976bg7e6ng4bwp7dbw6m7q0w184dkk1
License
MIT-0
Free to use, modify, and redistribute. No attribution required.