Gemini Citation

PassAudited by VirusTotal on May 11, 2026.

Overview

Type: OpenClaw Skill Name: gemini-citation Version: 1.0.3 The gemini-citation skill is a legitimate tool designed to perform evidence-based research using the Gemini API's Google Search grounding feature. The Python script (scripts/gemini_cite.py) correctly implements the official google-genai library, handles API keys via environment variables, and focuses solely on generating APA-formatted research summaries. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Queries may consume quota or incur charges under the Google account associated with the API key.

Why it was flagged

The script requires and uses a Gemini API key to call the Gemini service. This is purpose-aligned and not shown being logged or sent elsewhere, but it is still a sensitive credential.

Skill content
api_key: Optional[str] = os.environ.get("GEMINI_API_KEY")
Recommendation

Use a dedicated or restricted API key where possible, set usage limits, and avoid sharing the key in prompts, logs, or screenshots.

What this means

A future dependency update could change functionality or introduce bugs even though the skill’s own code is simple.

Why it was flagged

The dependency is not pinned to an exact version, so future installs may receive newer package versions with changed behavior.

Skill content
google-genai>=0.7.0
Recommendation

Install in a controlled environment and consider pinning a known-good google-genai version if reproducibility matters.

What this means

A user might over-trust the generated answer or citations without checking the listed sources.

Why it was flagged

The code enables Gemini Search grounding and prints grounding metadata, but it does not independently verify every generated claim or APA citation.

Skill content
It guarantees that generated facts are grounded in live web references rather than model hallucinations.
Recommendation

Treat the output as research assistance, not final proof; verify important claims and citation formatting against the source links.