Google Search Grounding 3
v1.0.0Google web search via Gemini Search Grounding (primary) and Custom Search JSON API (fallback). Use for: (1) Synthesized answers with citations (grounded search), (2) Raw link results with snippets, (3) Image search. Excellent Hebrew support. Preferred over built-in web_search (Perplexity).
⭐ 0· 853·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the implementation: the Python script calls Google Gemini (google-genai) for grounded answers and the Google Custom Search JSON API for raw/image searches. The primary credential requested (GOOGLE_API_KEY) is exactly what those APIs need. Minor metadata discrepancies exist (registry ownerId/version differ from _meta.json and SKILL.md versions), which look like packaging/authoring inconsistencies but do not change functionality.
Instruction Scope
SKILL.md and the script operate within the stated scope (run the script, call Google APIs). However the registry-level 'required env vars' lists only GOOGLE_API_KEY while the SKILL.md and code rely on GOOGLE_CSE_CX for raw/image modes (the code raises if CSE_CX is not set). The instructions therefore reference an environment variable not declared as required in the registry metadata — this will cause raw/image modes to fail unless the user sets GOOGLE_CSE_CX. Otherwise, the runtime instructions do not read unrelated files or exfiltrate data to unknown endpoints.
Install Mechanism
There is no complex external download; install.sh runs 'pip install google-genai' (a public Google package) which is appropriate for using Gemini. The installer first attempts pip with --break-system-packages (which can modify system-managed Python packages on some systems) then retries without it. This is expected but the --break-system-packages option can be intrusive on some hosts — recommend installing into a virtualenv or container.
Credentials
The skill asks only for GOOGLE_API_KEY (declared as primaryEnv) and uses optional env vars GOOGLE_CSE_CX, GOOGLE_SEARCH_LANG, and GOOGLE_SEARCH_COUNTRY. These are proportionate to a Google search integration. Action item: restrict the API key's scopes in Google Cloud to only the required APIs (Gemini / Custom Search) and avoid supplying a broadly privileged key. Also note the registry metadata did not mark GOOGLE_CSE_CX as required even though raw/image modes need it.
Persistence & Privilege
The skill does not request 'always: true' or other elevated platform privileges. It does not modify other skills or system settings. It will attempt a smoke test during install but does not persist extra credentials or alter unrelated configs.
Assessment
This skill appears to be what it claims: a Google/Gemini-grounded web search tool. Before installing: (1) Verify the GOOGLE_API_KEY you provide has minimal scopes (enable only Gemini API and Custom Search JSON API), (2) set GOOGLE_CSE_CX if you plan to use raw or image modes (the code requires it), (3) prefer installing dependencies into a virtualenv or container rather than using pip with --break-system-packages, (4) confirm the package 'google-genai' is acceptable for your environment, and (5) be aware that all queries and retrieved content go to Google's services (privacy considerations). Also note small metadata/version/ownerId inconsistencies in the package manifest — ask the publisher if provenance matters to you.Like a lobster shell, security has layers — review code before you run it.
latestvk972109qpmj018vwqvr7wh8vd580t2jf
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🔍 Clawdis
EnvGOOGLE_API_KEY
Primary envGOOGLE_API_KEY