Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Google AI Mode Search

v1.1.0

Perform Google AI Mode searches using your local Google cookies to get live sports scores, stock prices, news, weather, and AI summaries.

0· 61·0 current·0 all-time
byDhana@whoisdhana

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for whoisdhana/gaimode.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Google AI Mode Search" (whoisdhana/gaimode) from ClawHub.
Skill page: https://clawhub.ai/whoisdhana/gaimode
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install gaimode

ClawHub CLI

Package manager switcher

npx clawhub@latest install gaimode
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name/description match the implementation: the CLI either connects to a local Chrome DevTools Protocol endpoint or loads an exported cookies.json to make Google search requests. No unrelated credentials or network endpoints are requested.
!
Instruction Scope
The provided start-chrome-cdp.sh script force-kills all running 'Google Chrome' processes (pkill -9) before launching Chrome with a debug port — that is intrusive and not clearly warned in SKILL.md. Connecting to Chrome CDP gives the tool programmatic access to your browser (open pages, sessions) which is more powerful than a simple search; the SKILL.md does not fully disclose these implications.
Install Mechanism
This is instruction-only (no installer downloads), so nothing is pulled from remote hosts. However, the skill depends on Python, curl, and the Playwright Python library at runtime but does not declare or install these dependencies in SKILL.md — users may be surprised by missing requirements.
!
Credentials
The tool reads an exported cookies file (~/.config/gaimode/cookies.json) or connects to your running Chrome session — both grant access to sensitive Google session cookies and possibly browsing context. Requesting those cookies is functionally necessary for personalized results, but it is high-sensitivity data and the skill does not clearly warn about the risk of exposing active session cookies.
Persistence & Privilege
The skill does not request 'always' or other elevated platform privileges. It does include a launcher script that forcibly kills Chrome processes (temporary, not persistent), which can disrupt the user environment but does not modify other skills or system-wide configs.
What to consider before installing
This skill will either connect to your running Chrome via the DevTools debug port or read a file of exported Google cookies — both approaches give it access to your Google sessions and browsing context. Before installing or running it: (1) review the included scripts (start-chrome-cdp.sh and gaimode-cli.py) in a safe environment; (2) be aware start-chrome-cdp.sh will kill all running Chrome processes (you will lose open tabs/work), so do not run it while you have unsaved work; (3) avoid exporting full account cookies from your primary profile — if you must test, use a throwaway account or a dedicated Chrome profile and export only what you need; (4) install Python and Playwright in an isolated virtualenv or container, since dependencies are not declared; (5) prefer CDP mode only if you trust the code (CDP grants broad browser control); and (6) if you are uncomfortable with these risks, do not install — consider using official Google services or an API-based alternative that does not require private cookies.

Like a lobster shell, security has layers — review code before you run it.

latestvk97ewkg8vs54ztqq7387n3nkns8515dj
61downloads
0stars
2versions
Updated 1w ago
v1.1.0
MIT-0

gaimode - Google AI Mode Search

Search Google AI Mode from any OpenClaw agent!

⚠️ Uses Chrome CDP or your Google cookies stored locally. Not affiliated with Google.


Setup

Option 1: Chrome CDP (Recommended)

Best for 24/7 reliability!

# Start Chrome with debug port
bash ~/start-chrome-cdp.sh

# Keep that Chrome window open!

Option 2: Cookie Method

  1. Install EditThisCookie Chrome extension
  2. Go to google.com → Export cookies
  3. Save to: ~/.config/gaimode/cookies.json

Usage

Check Status

exec: python3 ~/.openclaw/workspace/skills/gaimode/gaimode-cli.py status

Search

exec: python3 ~/.openclaw/workspace/skills/gaimode/gaimode-cli.py search "PL live score"
exec: python3 ~/.openclaw/workspace/skills/gaimode/gaimode-cli.py search "IPL KKR GT score"

CDP Mode Benefits

  • ✅ More reliable (connects to YOUR Chrome)
  • ✅ No cookie expiration issues
  • ✅ Less likely to be blocked by Google
  • ✅ 24/7 ready

Keep Chrome open with debug port running!


Files

gaimode/
├── SKILL.md             # This file
├── gaimode-cli.py       # CLI tool
└── start-chrome-cdp.sh # Chrome CDP launcher

License

MIT - See GitHub

Comments

Loading comments...