Tavily Web Search

• Outcome: Pass
• Latest audit: May 28, 2026 · 8:41 AM UTC
• Version: 2.0.6

Overview

This is a coherent Tavily API skill that uses expected network calls, API-key access, local caching, and optional update checks for its stated search/research purpose.

Install only if you are comfortable giving the skill a Tavily API key and sending chosen searches, URLs, and research prompts to Tavily. Use --no-cache or clear ~/.openclaw/cache/tavily when working with sensitive material, and be deliberate with crawl/map/research because they can consume credits and may store returned content locally.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Rogue Agent: Self-Modification, Session Persistence
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (8)

Missing User Warnings

Medium

• Confidence: 88% confidence
• Finding: The script caches fetched crawl results, including raw page content, under the user's home directory without an explicit warning or controls around sensitivity. If the crawled pages contain private, regulated, or internal data, this creates unintended local data retention and possible disclosure to other local users, backups, or later processes.

Missing User Warnings

Medium

• Confidence: 91% confidence
• Finding: The script sends user-supplied crawl targets and optional natural-language instructions to a third-party API, but only warns about cost, not privacy or external transmission. Users may unknowingly transmit sensitive URLs, internal targets, or confidential instructions to Tavily, which is a real privacy and data-handling risk in this skill context.

Missing User Warnings

Medium

• Confidence: 82% confidence
• Finding: The script caches full sitemap results under the user's home directory without any explicit warning that discovered URLs and related metadata will be stored locally for an hour. If the mapped site is internal, sensitive, or user-specific, the cache may retain confidential structure information that could be exposed to other local users, backups, or forensic collection.

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: The script sends user-supplied URLs, crawl instructions, and related mapping parameters to an external Tavily service, but the user-facing warnings discuss only cost and not privacy or third-party data sharing. This can leak sensitive internal URLs, scoped domains, or investigative instructions to an external provider when operators may reasonably assume the tool runs locally.

Missing User Warnings

Medium

• Confidence: 84% confidence
• Finding: Research responses and the original query are written to a persistent cache under the user's home directory for 24 hours, which can retain sensitive prompts, proprietary topics, or third-party content longer than users expect. The tool emphasizes API cost but does not clearly warn users that their queries and results are stored locally by default.

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: The script persists search queries and returned results to ~/.openclaw/cache/tavily without explicit user consent or warning. Because results may include sensitive searches, snippets, and optionally raw page content, this creates local privacy exposure to other local users, backups, or forensic recovery.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The tool sends user search queries and optional full-content retrieval parameters to an external third-party API, but does not prominently warn the user that their input will leave the local environment. In a skill context, users may reasonably assume local processing, so silent transmission can expose sensitive research topics or confidential text embedded in queries.

Session Persistence

Medium

• Category: Rogue Agent

Content

添加每周检查的 cron 任务：
```bash
# 编辑 crontab
crontab -e

# 添加每周日 9:00 检查更新
0 9 * * 0 cd ~/.openclaw/workspace/skills/tavily-web-search && python3 scripts/update.py >> /tmp/tavily-update.log 2>&1

• Confidence: 85% confidence
• Finding: crontab -e

VirusTotal

No VirusTotal findings

Static analysis

No suspicious patterns detected.