← Back to Skills Marketplace
3005
Downloads
0
Stars
37
Active Installs
7
Versions
Install in OpenClaw
/install glm-web-search
Description
使用 GLM 联网搜索 MCP 进行网络搜索。触发条件：(1) 用户要求进行网络搜索、在线搜索、查找信息 (2) 需要查询最新资讯、新闻、资料 (3) 使用 GLM 的 web_search 功能
Usage Guidance
Install only if you are comfortable providing a GLM/BigModel API key, storing it in local OpenClaw configuration, and sending search terms to the GLM web-search service. Prefer a limited-use key, restrict the config file permissions, rotate/delete the key when no longer needed, and avoid searching highly sensitive personal or proprietary text through this skill.
Capability Analysis
Type: OpenClaw Skill
Name: glm-web-search
Version: 1.0.6
The skill is classified as suspicious due to the inherent risk of shell injection. The `SKILL.md` instructs the agent to execute shell commands like `mcporter call glm-search.webSearchPrime search_query="<搜索查询>"`. If the `<搜索查询>` (user-provided input) is not rigorously sanitized by the OpenClaw agent or the `mcporter` tool before being passed to the shell, it could lead to arbitrary command execution (RCE). While the skill's stated purpose is benign (web search), the method of execution introduces a significant vulnerability, classifying it as a risky capability without clear malicious intent from the skill developer.
Capability Assessment
Purpose & Capability
The stated purpose is GLM-backed web search, and the artifact only describes installing or using mcporter, configuring the GLM MCP endpoint, and calling a search tool.
Instruction Scope
The runtime instructions are scoped to search, but user queries are sent to an external GLM service and the shell-command examples should be treated as templates requiring safe argument handling.
Install Mechanism
Setup uses npx/mcporter and writes a local config file under ~/.openclaw/config; this is disclosed and purpose-aligned, with no hidden installer, background worker, or unrelated mutation.
Credentials
A GLM API key and outbound network access are proportionate for an API-backed search integration, though the artifact does not give strong privacy or credential-handling warnings.
Persistence & Privilege
The skill persists an API key locally and also shows an Authorization value in a URL-style config example; this is a real secret-handling hygiene risk, but not evidence of deception, exfiltration, privilege escalation, or destructive behavior.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install glm-web-search - After installation, invoke the skill by name or use
/glm-web-search - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.6
- 移除了自动从本地 auth-profiles.json 检索和建议 API Key 的流程，直接询问用户手动输入 API Key。
- 其他配置与用法保持不变。
v1.0.5
- 移除了自动从本地 auth-profiles.json 检索和建议 API Key 的流程，直接询问用户手动输入 API Key。
- 其他配置与用法保持不变。
v1.0.4
- 更改首次执行流程说明，明确首次需要安装，后续可直接从第6步调用
- API Key自动获取路径由 ~/.openclaw/agents/main/agent 改为 ~/.openclaw/agents/main/agent/auth-profiles.json
- 移除了“名称包含智谱 Key 格式”判断，保留名称包含 “zhipu” 或 “zai”
- 精简部分步骤描述，流程表述更清晰
v1.0.3
Version 1.0.3
- 步骤 4 中，MCP 服务器类型由 http 改为 sse，URL 也相应调整，并将鉴权方式直接拼接于 URL。
- 步骤 6 中，调用参数由 query 修改为 search_query。
- 步骤 3.2 与 3.3 的描述顺序微调，API 密钥获取流程更清晰。
- 其他表述和顺序优化，使操作流程更加清楚易懂。
v1.0.2
- 移除了“完整流程示例”部分，简化了流程描述。
- 主要文档内容与之前版本保持一致，流程步骤和使用说明未发生改变。
- 无功能变化，仅优化和精简了文档内容。
v1.0.1
- 增加了“重要提示：如果出现问题以官方说明为准”，引导用户参考官方文档
- 其余内容与前一版本一致，无功能或步骤变更
v1.0.0
.
Metadata
Frequently Asked Questions
What is glm-web-search?
使用 GLM 联网搜索 MCP 进行网络搜索。触发条件：(1) 用户要求进行网络搜索、在线搜索、查找信息 (2) 需要查询最新资讯、新闻、资料 (3) 使用 GLM 的 web_search 功能. It is an AI Agent Skill for Claude Code / OpenClaw, with 3005 downloads so far.
How do I install glm-web-search?
Run "/install glm-web-search" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is glm-web-search free?
Yes, glm-web-search is completely free (open-source). You can download, install and use it at no cost.
Which platforms does glm-web-search support?
glm-web-search is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created glm-web-search?
It is built and maintained by 要啥自行车 (@thincher); the current version is v1.0.6.
More Skills