Serpapi Mcp

Run SerpAPI searches via SerpAPI's MCP server using mcporter. Use when the user asks to search the web with SerpAPI/SerpAPI MCP, wants SerpAPI inside Clawdbot, or to use the /serp command.

Before installing: - Verify and correct metadata: the registry entry should declare required binaries (mcporter, node) and required env vars (SERPAPI_API_KEY or SERPAPI_API_KEYS; optional AIRTABLE_TOKEN/AIRTABLE_BASE_ID/AIRTABLE_TABLE). Ask the publisher to fix metadata if missing. - Audit mcporter (the npm package) to ensure you trust it; consider running it in an isolated environment first. - Provide the minimal SerpAPI key needed (use a limited-capacity/test key if possible) rather than a high-privilege key, and prefer skill-scoped env storage rather than committing secrets. - Be cautious enabling SERP_LOG_AIRTABLE: it will send raw SerpAPI JSON (potentially large, including URLs and snippets) to Airtable. Only enable if you trust the logger and the destination base/table schema. - Ensure Node version on host provides the required features (global fetch used in airtable_log.mjs) or run in an environment with a known Node LTS. - If you need higher assurance, request the publisher to provide provenance (homepage, source repo) and to update the registry metadata to reflect the actual requirements.

Type: OpenClaw Skill Name: serpapi-mcp Version: 1.1.1 The skill bundle is benign. It provides a wrapper for SerpAPI searches, optionally logging results to Airtable and fetching AI overviews. All network communications are directed to legitimate SerpAPI and Airtable endpoints, aligning with the stated purpose. Sensitive API keys and tokens are correctly handled via environment variables, as explicitly documented in SKILL.md and implemented in the scripts. There is no evidence of prompt injection attempts, unauthorized data exfiltration, persistence mechanisms, or other malicious behaviors. The use of temporary files and external dependencies (`mcporter`) is standard and well-managed.