Search Google programmatically and extract structured SERP data, Google AI Overviews (SGE), citations, screenshots, and AI Mode follow-up results. Use when y...
Security Analysis
high confidenceThe skill's declared purpose (Google SERP + AI Overview extraction) matches what the code and instructions do: it calls Pangolinfo APIs, accepts an API key or email/password, and has no disproportionate requirements or hidden endpoints.
Name/description ask for a Google SERP/SGE scraping capability and the package requires an API key (or email/password) and Python; the code calls scrapeapi.pangolinfo.com and auth endpoints that are consistent with that purpose.
SKILL.md instructs the agent to run the bundled Python script with expected flags and environment variables, describes outputs and error handling, and limits scope (explicit 'When NOT to use'). Instructions do not request unrelated files, system credentials, or network endpoints outside Pangolinfo.
Instruction-only with bundled scripts; no package downloads or installers. Requires only python3 on PATH. No high-risk archive downloads or unusual install behavior.
Requires PANGOLINFO_API_KEY or PANGOLINFO_EMAIL + PANGOLINFO_PASSWORD which are directly used to authenticate to the Pangolinfo API. Number and type of env vars are proportional to the service integrated. Note: optional per-run caching to ~/.pangolinfo_api_key exists (disabled by default).
always:false and the skill does not request system-wide privileges. The only persistence option is the optional API key cache file under the user's home directory (CACHE_TO_DISK is False by default and caching is opt-in).
Guidance
This skill appears internally consistent with its stated purpose. Before installing: 1) Prefer supplying PANGOLINFO_API_KEY over email+password to avoid storing your account password in the environment. 2) Be aware of optional caching: if you enable --cache-key or change CACHE_TO_DISK, a token may be written to ~/.pangolinfo_api_key; delete that file to revoke local persistence. 3) Confirm you trust the Pangolinfo service (https://pangolinfo.com and scrapeapi.pangolinfo.com) since network requests and your credentials go to that vendor. 4) Watch credit usage and rate limits (docs state requests consume credits on success). 5) If you need further assurance, review the remaining (truncated) parts of scripts/pangolinfo.py for any unexpected remote endpoints or behaviors—based on the provided files, no unrelated exfiltration or privileged actions were found.
Latest Release
v2.0.2
Version 2.0.2: Major update — introduces Google SERP & AI Overview search functionality as a new, standalone skill. - Now supports programmatic Google searching, AI Overview (SGE) extraction, citation retrieval, and SERP screenshots. - Adds support for AI Mode with multi-turn follow-up questions for deeper query analysis. - Amazon scraping features are removed and spun out to a separate skill ("Pangolinfo Amazon Scraper"). - New documentation and schema references for output structure. - Designed for seamless use in agent frameworks and multistep workflows. - Improved error handling for Google-specific use cases (rate limits, SGE availability, authorization).
More by @pangolinfo
Published by @pangolinfo on ClawHub
