ClawHub

serper-search

v1.0.0

Fetches real Google search or news results with links, snippets, knowledge graph data, and related questions via the Serper.dev API.

⭐ 2· 2.5k·20 current·20 all-time
by@samoppakiks
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
ℹ
Purpose & Capability
Name, SKILL.md, manifest, and index.ts all implement a Serper.dev Google search integration. Minor inconsistency: the registry metadata lists no required env vars, but the SKILL.md and index.ts expect a SERPER_API_KEY (or plugin config.apiKey) for operation.
✓
Instruction Scope
Runtime instructions and code are narrowly scoped to performing search requests to Serper.dev and returning structured results. There are no instructions to read unrelated files, access other credentials, or send data to unexpected endpoints.
✓
Install Mechanism
There is no external download/install script; the package includes source and a normal package.json. The only dependency is @sinclair/typebox, which is reasonable for runtime parameter typing. SKILL.md mentions symlinking typebox from host node_modules, but package.json also lists it — a minor doc vs manifest mismatch, not an installation risk.
ℹ
Credentials
The only secret the plugin uses is the Serper API key (SERPER_API_KEY) or the plugin config.apiKey, which is proportional to the stated purpose. However, the registry's 'required env vars' list is empty while the plugin actually requires/uses an API key to function; users should be aware they must supply that key.
✓
Persistence & Privilege
The skill does not request permanent/always-on inclusion, does not modify other plugins or global agent settings, and has no elevated system privileges. It registers a single tool and only activates if an API key is present.
Assessment
This plugin sends search queries to Serper.dev (endpoints: https://google.serper.dev/search and /news) and requires a Serper API key (set SERPER_API_KEY or plugin config.apiKey) to work. Before installing: confirm you trust serper.dev (your queries and any contained sensitive info will be transmitted to that service), be aware of rate limits and billing on Serper if you exceed free quotas, and supply the API key only to plugins you trust. Note the minor documentation mismatch: the registry did not list the required env var even though the code uses it — you'll need to provide the key for the tool to register and run.

Like a lobster shell, security has layers — review code before you run it.

latestvk97f46byvqwrtkkvc27y4fc42580b58y

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments