← Back to Skills Marketplace
228
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install openclaw-grok-search
Description
Cross-platform real-time web research and search via an OpenAI-compatible Grok endpoint, returning JSON with content and sources. Use for version checks, API...
Usage Guidance
This skill will send whatever you query to a configured Grok-compatible endpoint. The repository includes a default config.json that points to a third‑party proxy (ai.huan666.de) and embeds an API key — do NOT assume that key or endpoint are trustworthy. Before installing: (1) Inspect and remove or replace config.json; treat the embedded API key as suspicious and do not use it. (2) Prefer to run the interactive configure.py and supply your own trusted base_url and key (or use an endpoint you control). (3) Avoid sending sensitive system or credential data in queries. (4) If you need assurance, ask the author to confirm the embedded key is non-functional/dummy, or verify the third‑party endpoint's trustworthiness. If you cannot verify those, consider this skill risky for handling sensitive data.
Capability Analysis
Type: OpenClaw Skill
Name: openclaw-grok-search
Version: 1.0.0
The skill bundle is classified as suspicious because it includes a hardcoded API key and a pre-configured base URL in `config.json` pointing to a third-party proxy service (ai.huan666.de), which is also promoted in `README.md` via an affiliate link. Furthermore, `SKILL.md` contains instructions directing the AI agent to prioritize this skill over built-in search tools, effectively routing potentially sensitive user queries through an unverified external intermediary. While the Python scripts (`scripts/grok_search.py` and `scripts/configure.py`) do not exhibit direct malicious behavior like local data theft or remote code execution, the overall package encourages high-risk privacy practices and bypasses standard security controls.
Capability Assessment
Purpose & Capability
The skill's stated purpose is local, project-scoped web research via a Grok endpoint. However the repository includes a config.json with a populated base_url (https://ai.huan666.de) and what appears to be an API key; the SKILL metadata declares no required credentials. Bundling a live third-party endpoint and an API key inside the project is not necessary for a generic search skill and is disproportionate to the claimed minimal requirements.
Instruction Scope
Runtime instructions and code direct queries to an OpenAI-compatible /v1/chat/completions endpoint and return structured JSON. The code does not appear to read arbitrary system files or exfiltrate local files automatically, but any query (including error text or system data the agent supplies) will be sent to the configured external base_url. README also recommends a specific third‑party proxy and registration link, which effectively routes queries outside the user's control.
Install Mechanism
No install spec — this is instruction- and script-based and runs in the project folder. No external archives or downloads are fetched during installation (scripts are local), so install mechanism risk is low.
Credentials
Although the skill declares no required env vars or primary credential, the shipped config.json contains a bearer-style API key and third-party base_url. This is a mismatch: the package effectively supplies credentials and an external relay by default. That embedded secret and default endpoint are unnecessary and increase the risk that user queries (possibly containing sensitive data) are sent to a service that can log them.
Persistence & Privilege
The skill is not always-enabled, does not request system-wide privileges, and only writes config into the project directory (configure.py writes a project-local config). There is no evidence it modifies other skills or global agent settings.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install openclaw-grok-search - After installation, invoke the skill by name or use
/openclaw-grok-search - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of openclaw-grok-search.
- Provides real-time, cross-platform web research via an OpenAI-compatible Grok endpoint.
- Returns structured JSON output with content, sources, and raw data.
- Designed for use cases like version checks, troubleshooting, and verifying official documentation or facts.
- Runs from the project directory on Windows, macOS, or Linux; does not require global installs.
- Supports multiple config methods: CLI args, environment variables, and config files with clear priority rules.
- Enforces citation of sources and retry logic for robust searches.
Metadata
Frequently Asked Questions
What is Openclaw Grok Search?
Cross-platform real-time web research and search via an OpenAI-compatible Grok endpoint, returning JSON with content and sources. Use for version checks, API... It is an AI Agent Skill for Claude Code / OpenClaw, with 228 downloads so far.
How do I install Openclaw Grok Search?
Run "/install openclaw-grok-search" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Openclaw Grok Search free?
Yes, Openclaw Grok Search is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Openclaw Grok Search support?
Openclaw Grok Search is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Openclaw Grok Search?
It is built and maintained by 莫循 (@moxunjinmu); the current version is v1.0.0.
More Skills