ClawHub

Google Search (Serper.dev)

v1.0.3

Google Search powered by Serper.dev API — 9 search types: web, news, images, videos, places, shopping, scholar, patents, autocomplete. Returns Knowledge Grap...

⭐ 0· 532·1 current·1 all-time
by@minilozio
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
ℹ
Purpose & Capability
The name/description match the implementation: the scripts call https://google.serper.dev endpoints for the listed search types. One minor inconsistency: the registry metadata at the top of the report lists "Required env vars: none / Primary credential: none," while package.json and SKILL.md declare SERPER_API_KEY as the primary environment variable — the key is required for the stated purpose and appears in code.
✓
Instruction Scope
SKILL.md instructs the agent to run the included Node script, parse results, and optionally use web_fetch on promising links. All operations described are within the scope of performing web searches and follow-ups; the only external transmissions are search queries to serper.dev and optional fetches of result URLs.
✓
Install Mechanism
There is no install spec that downloads arbitrary code. This is effectively an instruction+script skill: it expects Node.js 18+ (native fetch) and runs local TypeScript via npx/tsx. No remote installers, URL-shortened downloads, or archive extraction are present.
ℹ
Credentials
The only sensitive item required is SERPER_API_KEY, which is appropriate and necessary to call Serper.dev. The earlier registry metadata omission of this env var is an inconsistency in the package manifest/registry listing (but not a functional problem in the files). No other credentials or broad config paths are requested.
✓
Persistence & Privilege
The skill does not request always:true and does not modify other skills or system-wide settings. It can be invoked by the agent (normal behavior) but does not demand permanent elevated presence.
Assessment
This skill appears to do what it says: it sends queries to https://google.serper.dev using the SERPER_API_KEY. Before installing, verify you are comfortable sending your search queries to Serper.dev (queries and any included sensitive text will leave your environment). Ensure you set SERPER_API_KEY in your environment (package.json and SKILL.md require it). Note the registry metadata in the submission omitted the required env var — that mismatch is likely a packaging oversight but double-check the manifest presented by your installer. Be mindful of credit usage (free tier limits and shopping costs 2 credits) and that the agent may fetch external result links (web_fetch) which can retrieve arbitrary remote content. If you want stricter control, limit agent autonomy or review the included scripts locally before enabling the skill.

Like a lobster shell, security has layers — review code before you run it.

latestvk972c3a1x6m4x2w7enjqxa6x4x82bhj4

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments