AIsa Tavily Search

PassAudited by ClawScan on May 8, 2026.

Overview

This is a coherent web research skill that uses your AISA_API_KEY to send search queries or URLs to AIsa’s API, with no hidden or destructive behavior found.

This skill appears safe and purpose-aligned for web research. Before installing, confirm you are comfortable sending search queries or URLs to AIsa and provide only a dedicated API key that you can revoke or rotate.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Anyone using this skill must provide an AIsa API key, which authorizes calls to the AIsa service.

Why it was flagged

The skill requires a provider API key. This is expected for the stated AIsa search integration, but it is still delegated account/API authority.

Skill content
`AISA_API_KEY` is required for AIsa-backed API access.
Recommendation

Use a dedicated, revocable AIsa API key if available, avoid sharing it in chat, and rotate it if you suspect exposure.

What this means

Search queries, requested topics, and related parameters are transmitted to AIsa for processing.

Why it was flagged

The script sends the user’s search query and search parameters to AIsa’s external API. This is purpose-aligned and disclosed, but it is a third-party data flow.

Skill content
await fetch("https://api.aisa.one/apis/v1/tavily/search", { ... body: JSON.stringify(body) })
Recommendation

Do not submit private, confidential, or regulated information as search queries unless your AIsa account and data-processing terms permit it.