← 返回 Skills 市场
vinitngr

serper-v

作者 Vinit · GitHub ↗ · v2.0.1
cross-platform ⚠ suspicious
1839
总下载
2
收藏
3
当前安装
2
版本数
在 OpenClaw 中安装
/install serper-v
功能描述
Professional search (news, places, maps, reviews, scholar, patents) and bulk scraping via Serper API.
安全使用建议
Before installing or running this skill: (1) Verify the npm package (@vinitngr/serper-v) on the npm registry and inspect its source repository or published tarball — do not install without reviewing code. (2) Avoid installing globally with --force; prefer a container or isolated environment to limit system changes. (3) Ask the author where `serperV auth` stores the API key and whether scraped data is sent off-device; check and audit any created config files. (4) If you must use it, create a dedicated (least-privilege) API key for Serper that can be revoked, and do not reuse high-privilege credentials. (5) If you need stronger assurance, request a versioned release link, source repo, or a signed package before proceeding.
功能分析
Type: OpenClaw Skill Name: serper-v Version: 2.0.1 The skill is classified as suspicious primarily due to the `npm install -g @vinitngr/serper-v --force` command specified in `SKILL.md`. The `--force` flag can bypass dependency checks and overwrite existing files, which introduces a risk to system stability or integrity, even if there is no clear evidence of intentional malicious behavior. While the stated purpose of 'bulk scraping' is a high-risk capability, the instructions themselves do not indicate malicious intent for its use.
能力评估
Purpose & Capability
The name/description (Serper-powered search and scraping) matches the CLI usage shown in SKILL.md (serperV search / scrape). Requiring an API key for the Serper service is expected — however, the skill metadata lists no primary credential or required env vars while the instructions explicitly require running `serperV auth <api_key>`, which is an inconsistency.
Instruction Scope
SKILL.md instructs the agent/user to globally install a third-party npm CLI and to run `serperV auth <api_key>`. It does not explain where the key is stored, how the CLI transmits scraped results, or whether scraped content is forwarded to external endpoints. The CLI uses bulk scraping commands (potentially high-volume web access) and the SKILL.md also recommends `--force` in installation — these broaden the runtime actions in ways not covered by the metadata.
Install Mechanism
There is no platform install spec, but SKILL.md and SETUP.md instruct a global `npm install -g @vinitngr/serper-v` (SKILL.md even uses `--force`). The package author scope (@vinitngr) and package source are unknown and there is no homepage or source link in the skill registry — installing an unsigned npm package globally can execute arbitrary code and modify the system.
Credentials
The skill metadata declares no required env vars or primary credential, yet the runtime steps require an API key (`serperV auth <api_key>`). That key may be stored on disk or injected into process env at runtime — the skill does not declare or constrain where secrets live. Requesting API keys is reasonable for this purpose, but the omission in metadata and lack of detail about credential handling is disproportionate/unexplained.
Persistence & Privilege
The skill is not flagged as always: true and is user-invocable (normal). However the installation instructions require a global npm install which gives the CLI persistent system presence and may store auth tokens on disk; that persistent footprint is not described in the skill metadata.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install serper-v
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /serper-v 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v2.0.1
- Removed six files, including source code, configuration, and test files. - Added SETUP.md with setup or installation details. - No user-facing feature changes documented; this update focuses on project structure cleanup.
v2.0.0
- Added detailed usage instructions, including example commands for search and scraping. - Listed all supported types: search, places, maps, news, shopping, scholar, and patents. - Documented advanced options: date range filtering, pagination, country and language codes. - Provided step-by-step setup guide for installation and authentication.
元数据
Slug serper-v
版本 2.0.1
许可证
累计安装 4
当前安装数 3
历史版本数 2
常见问题

serper-v 是什么?

Professional search (news, places, maps, reviews, scholar, patents) and bulk scraping via Serper API. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 1839 次。

如何安装 serper-v?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install serper-v」即可一键安装,无需额外配置。

serper-v 是免费的吗?

是的,serper-v 完全免费(开源免费),可自由下载、安装和使用。

serper-v 支持哪些平台?

serper-v 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 serper-v?

由 Vinit(@vinitngr)开发并维护,当前版本 v2.0.1。

💬 留言讨论