xAI Search

Search X/Twitter and the web in real-time using xAI's Grok API with agentic search tools.

This skill's code is short and does what the description says (calls xAI/Grok via xai-sdk), but the registry metadata failing to declare the required XAI_API_KEY is a transparency issue. Before installing or providing an API key: 1) Verify the skill's provenance (homepage/author) — the source is unknown. 2) Inspect the xai-sdk package on PyPI (or its repo) to ensure it's the official client. 3) Only provide an XAI API key with minimal permissions and consider creating a scoped/test key. 4) Install and run the script in an isolated environment (virtualenv, container) if you want to reduce risk. 5) Ask the publisher/registry to correct the metadata so required credentials are declared. If you can't verify the package origin, treat this as higher risk and avoid installing.

Type: OpenClaw Skill Name: xai-search Version: 1.0.4 The skill is designed to interact with the xAI Grok API for web and X/Twitter search. The `SKILL.md` provides clear instructions and `curl` examples for using the xAI API, and the `scripts/xai-search.py` script implements this functionality using the official `xai-sdk`. The script correctly retrieves the `XAI_API_KEY` from environment variables and uses it to make legitimate API calls to `api.x.ai`. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, prompt injection attempts against the agent, or obfuscation. All actions are aligned with the stated purpose.