← Back to Skills Marketplace
garibong-labs

Brave Api Setup

by garibong-labs · GitHub ↗ · v0.1.2
cross-platform ✓ Security Clean
1727
Downloads
1
Stars
5
Active Installs
3
Versions
Install in OpenClaw
/install brave-api-setup
Description
Set up Brave Search API for OpenClaw web_search. Use when user needs to configure Brave API, get Brave API key, enable web search, or fix "missing_brave_api_key" error.
README (SKILL.md)

Brave API Setup

Automates Brave Search API key extraction and OpenClaw configuration.

Included Files

File Description
SKILL.md This document
scripts/apply-api-key.js Applies API key to OpenClaw config (Node.js)

Dependencies

  • Node.js (for apply-api-key.js)
  • OpenClaw browser capability (browser tool)

When to Use

  • User wants to enable web_search in OpenClaw
  • Error: missing_brave_api_key
  • User asks to set up Brave Search API

Prerequisites

  • User must have a Brave Search API account
  • User must be logged in (openclaw browser profile)
  • API key must exist in dashboard

Workflow

Step 1: Navigate to API keys page

browser(action="navigate", profile="openclaw", 
        targetUrl="https://api-dashboard.search.brave.com/app/keys")

Step 2: Click reveal button (eye icon)

Take snapshot, find the reveal button, click it:

browser(action="act", kind="click", ref="\x3Ceye-button-ref>")

Step 3: Extract key via JavaScript (avoids LLM transcription error)

browser(action="act", kind="evaluate", 
        fn="(() => { const cells = document.querySelectorAll('td'); for (const cell of cells) { const text = cell.textContent?.trim(); if (text && text.startsWith('BSA') && !text.includes('•') && text.length > 20) return text; } return null; })()")

The result field contains the exact API key.

Step 4: Apply to config (direct file write, no LLM involved)

Relative to skill directory:

node \x3Cskill_dir>/scripts/apply-api-key.js "\x3Cextracted-key>"

Or use gateway config.patch with the extracted key.

Why This Approach

Problem: LLM can confuse similar characters when transcribing (O vs 0, l vs 1).

Solution:

  1. evaluate extracts key via JavaScript → returns exact string
  2. apply-api-key.js writes directly to config → bit-perfect

The key never passes through LLM text generation.

Manual Account Setup

If user doesn't have an account:

  1. Go to https://api-dashboard.search.brave.com
  2. Sign up with email
  3. Subscribe to Free plan (requires credit card)
  4. Create API key in dashboard
  5. Then run this skill

문의 / Feedback

버그 리포트, 기능 요청, 피드백은 아래로 보내주세요.

Usage Guidance
This skill appears to be coherent and limited to its stated job, but it will access your logged-in Brave dashboard (via the agent/browser) and will write to your OpenClaw config file. Before installing or running it: 1) review the included scripts (scripts/apply-api-key.js) yourself (it is short and only reads/writes ~/.openclaw/openclaw.json), 2) back up ~/.openclaw/openclaw.json, 3) confirm you want the agent/browser to access the dashboard session used to create the key, and 4) consider manually running the node script with a known key (or in a safe environment) to verify behavior. If you have doubts about the source, contact the developer or type the key into your config manually instead of automating the reveal/capture step.
Capability Analysis
Type: OpenClaw Skill Name: brave-api-setup Version: 0.1.2 The skill `brave-api-setup` is designed to automate the configuration of the Brave Search API key for OpenClaw. It uses the `browser` tool to navigate to the Brave API dashboard, extract the API key via JavaScript evaluation, and then uses a local Node.js script (`scripts/apply-api-key.js`) to write this key directly into the OpenClaw configuration file (`~/.openclaw/openclaw.json`). All actions are clearly aligned with the stated purpose, and there is no evidence of data exfiltration, malicious execution (beyond expected configuration updates), persistence mechanisms, or prompt injection attempts against the agent. The use of `browser(action="evaluate")` is for a specific, legitimate data extraction task from a trusted domain.
Capability Assessment
Purpose & Capability
Name/description ask to configure Brave API for OpenClaw web_search. Required binary (node) and the included node script that writes to ~/.openclaw/openclaw.json are exactly what you'd expect for applying an API key. No unrelated credentials or services are requested.
Instruction Scope
SKILL.md instructs the agent to use the OpenClaw browser profile to navigate the Brave API dashboard, click reveal, and run an in-page JS evaluation to extract the BSA key, then call the included Node script to write it to the OpenClaw config. This stays within the stated purpose, but it requires the agent/browser to access the user's logged-in Brave dashboard and page DOM (sensitive session access). The skill explicitly avoids routing the key through the LLM, which matches the provided code.
Install Mechanism
Instruction-only skill with a small included Node script; no external downloads, package installs, or archive extraction. This is a low-risk install surface — it only requires that 'node' be available to run the included script.
Credentials
The skill declares no required env vars or credentials and does not request unrelated secrets. It does rely on process.env.HOME in the Node script to find ~/.openclaw/openclaw.json and on the OpenClaw browser profile/session to access the Brave dashboard — both are proportional to extracting and applying a user API key. One small inconsistency: SKILL.md references the 'browser' tool dependency but the registry metadata doesn't explicitly list that capability; this is likely a tooling/metadata omission rather than malicious.
Persistence & Privilege
The skill is not marked always:true and does not request permanent or elevated platform privileges. The included script writes only to the user's OpenClaw config (~/.openclaw/openclaw.json), which is within the expected scope for applying an API key; it does not modify other skills or system-wide settings.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install brave-api-setup
  3. After installation, invoke the skill by name or use /brave-api-setup
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.2
연락처 추가 ([email protected])
v0.1.1
Unified all text to English
v0.1.0
Initial release — browser-based API key extraction with JS evaluate to avoid LLM transcription errors
Metadata
Slug brave-api-setup
Version 0.1.2
License
All-time Installs 5
Active Installs 5
Total Versions 3
Frequently Asked Questions

What is Brave Api Setup?

Set up Brave Search API for OpenClaw web_search. Use when user needs to configure Brave API, get Brave API key, enable web search, or fix "missing_brave_api_key" error. It is an AI Agent Skill for Claude Code / OpenClaw, with 1727 downloads so far.

How do I install Brave Api Setup?

Run "/install brave-api-setup" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Brave Api Setup free?

Yes, Brave Api Setup is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Brave Api Setup support?

Brave Api Setup is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Brave Api Setup?

It is built and maintained by garibong-labs (@garibong-labs); the current version is v0.1.2.

💬 Comments