ClawHub

xAI

v1.3.1

Chat with Grok models via xAI API. Supports Grok-4, Grok-4.20, Grok-3, Grok-3-mini, vision, and real-time X search.

⭐ 5· 2.7k·9 current·11 all-time
byMatt Van Horn@mvanhorn
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (chat with Grok, vision, X search) match the shipped scripts and SKILL.md. Required env var XAI_API_KEY is the expected credential for the xAI API; no unrelated credentials or binaries are requested.
✓
Instruction Scope
SKILL.md instructs running the included Node scripts and setting XAI_API_KEY; the scripts implement exactly those behaviors (chat, models list, X search, vision). The scripts read the optional ~/.clawdbot/clawdbot.json to find a saved apiKey (consistent with the documented openclaw config), and otherwise only access files the user supplies (image path).
✓
Install Mechanism
No install spec; this is instruction+script-based and does not download or extract remote archives or run installers. No external package installs or URLs that would pull arbitrary code are used.
✓
Credentials
Only XAI_API_KEY is required (primaryEnv). The code also reads optional XAI_MODEL and HOME for config lookup, which is reasonable. No other secrets or unrelated environment variables are requested.
✓
Persistence & Privilege
Skill is not always-enabled, does not request permanent platform privileges, and does not modify other skills or system-wide settings. It only looks up its own API key from the documented config path.
Assessment
This skill appears coherent and implements what it claims: chat, vision, and X search via the xAI API. Before installing: (1) Ensure you trust the x.ai service and the skill source (repository owner listed in files). (2) Keep your XAI_API_KEY private; the scripts will send any provided images (encoded as base64) and prompts to api.x.ai, so avoid sending sensitive images or secrets. (3) If you plan to install from a third-party copy, verify the files match the repository linked in the metadata. If you want stricter isolation, set the API key via the platform config instead of environment variables.

Like a lobster shell, security has layers — review code before you run it.

latestvk977e724qgx06wxah6y3t4pnvd82f44b

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🤖 Clawdis
EnvXAI_API_KEY
Primary envXAI_API_KEY

Comments