ClawHub
Code PluginExecutes codesource-linked

Google

OpenClaw Google web search provider powered by SerpApi

Community code plugin. Review compatibility and verification before install.
google · runtime id google
Install
openclaw plugins install clawhub:google
Latest Release
Version 0.1.0
Compatibility
{
  "builtWithOpenClawVersion": "2026.3.23-2",
  "pluginApiRange": ">=2026.3.23"
}
Capabilities
{
  "bundledSkills": [],
  "capabilityTags": [
    "executes-code"
  ],
  "channels": [],
  "commandNames": [],
  "configSchema": true,
  "configUiHints": false,
  "executesCode": true,
  "hooks": [],
  "httpRouteCount": 0,
  "materializesDependencies": false,
  "providers": [],
  "runtimeId": "google",
  "serviceNames": [],
  "setupEntry": false,
  "toolNames": []
}
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description, manifest, SKILL.md, and source code all implement a Google web-search provider that calls SerpApi. The only credential it requests (SERPAPI_API_KEY) is appropriate and used to call https://serpapi.com/search.json. Nothing in the package demands unrelated cloud credentials or system access.
✓
Instruction Scope
SKILL.md gives narrow instructions: install/build the plugin, enable it, configure the SerpApi key or env var, and call the built-in web_search tool with documented parameters. The runtime code only constructs a SerpApi request, caches results, and returns structured search data. There are no instructions to read unrelated files, scan system state, or transmit data to unexpected endpoints.
✓
Install Mechanism
There is no opaque installer: build/install steps are standard npm and OpenClaw plugin commands. The code uses normal npm dependencies (openclaw and @sinclair/typebox). No downloads from untrusted URLs or embedded executables were observed.
✓
Credentials
The package only requires a SerpApi API key (config path and optional SERPAPI_API_KEY env var). No other secrets, unrelated environment variables, or config paths are requested. The code reads only the declared credential and standard plugin config.
✓
Persistence & Privilege
The plugin does not request always:true and is user-invocable only. It registers itself via the plugin API and uses normal provider registration; it does not modify other plugins' configs or request elevated system privileges.
Assessment
This plugin appears to do exactly what it says: proxy web_search to Google using SerpApi. Before installing, decide how you want to supply your SerpApi key (gateway env var SERPAPI_API_KEY or plugin config). Be aware searches go to serpapi.com (third-party service) so review SerpApi's privacy/rate-limit policies and avoid sharing highly sensitive data in queries. If you want extra assurance, you can inspect the included source files (src/) or run the tests locally before enabling the plugin.
✗
tests/e2e/google-plugin.e2e.test.ts:55
Environment variable access combined with network send.
!
tests/e2e/google-plugin.e2e.test.ts:1
File read combined with network send (possible exfiltration).
Patterns worth reviewing
These patterns may indicate risky behavior. Check the VirusTotal and OpenClaw results above for context-aware analysis before installing.
Verification
{
  "hasProvenance": false,
  "scanStatus": "clean",
  "scope": "artifact-only",
  "sourceCommit": "214f64f3e3cd0063a4c1ac5eb5ba04eec195b377",
  "sourceRepo": "clawic/plugins",
  "sourceTag": "main",
  "summary": "Validated package structure and linked the release to source metadata.",
  "tier": "source-linked"
}
Tags
{
  "latest": "0.1.0"
}

Google Plugin

OpenClaw web search provider that routes web_search through Google results via SerpApi.

Install

npm install
npm run build
openclaw plugins install .
openclaw plugins enable google
openclaw gateway restart

Config

{
  tools: {
    web: {
      search: {
        enabled: true,
        provider: "google",
      },
    },
  },
  plugins: {
    entries: {
      google: {
        enabled: true,
        config: {
          webSearch: {
            apiKey: "YOUR_SERPAPI_KEY", // pragma: allowlist secret
            location: "Madrid, Spain",
            country: "es",
            language: "es",
            safeSearch: "active",
            count: 5,
          },
        },
      },
    },
  },
}

You can also provide the credential through the gateway environment with SERPAPI_API_KEY.

Usage

After selecting the provider, use the built-in web_search tool:

await web_search({
  query: "latest OpenClaw plugin SDK changes",
  count: 5,
  country: "us",
  language: "en",
  location: "Austin, Texas, United States",
  safeSearch: "active",
});

Supported parameters:

  • query
  • count
  • location
  • country
  • language
  • site
  • safeSearch