Irene Tavily Search

使用Tavily API进行智能网络搜索。无需信用卡，每月1000次免费查询。支持AI增强的搜索结果和深度研究模式。Use when: 需要高质量搜索结果、学术研究、或不想绑定信用卡的场景。

Security Scan

The skill's code and instructions generally match a Tavily search helper, but there are clear inconsistencies around declared requirements and credential handling that reduce transparency and warrant caution.

Purpose & Capability

The name, description, SKILL.md and scripts/search.py all describe a Tavily-based search tool and the script calls https://api.tavily.com/search — that is coherent with the stated purpose. However the skill metadata declares required binaries (curl and python3) while the included code only uses python3; curl is never invoked. Also the registry metadata lists no required env vars but both SKILL.md and the script require a TAVILY_API_KEY. These mismatches suggest sloppy metadata or incomplete declaration.

Instruction Scope

Runtime instructions and the script stay within the stated purpose: they obtain an API key (from environment or typical .env paths), build a JSON payload and POST it to Tavily's API, then format results for display. The script does not attempt to read unrelated system files or call unexpected external endpoints. Note: the SKILL.md recommends writing the API key to ~/.openclaw/.env and the script will scan ~/.openclaw/.env, ~/.env, and .env for a TAVILY_API_KEY line — this is expected behavior but worth noting because it will read user config files to find the key.

Install Mechanism

This is an instruction-only skill with no install spec. No downloads or archives are written to disk by an installer. That minimizes install-time risk.

Credentials

The SKILL.md and scripts require a TAVILY_API_KEY (environment variable or .env entry) but the skill's declared requirements list no required env vars or primary credential. This mismatch reduces transparency — users may not realize they must supply an API key. Also the code places the api_key in the JSON payload (payload['api_key']) rather than using an Authorization header; while not necessarily malicious, it's a less standard pattern and users should confirm the API endpoint and TLS usage. The declared required binaries including curl are disproportionate because curl is not used by the included code.

Persistence & Privilege

The skill does not request always:true and does not modify other skills or system-wide config. It reads typical user config paths to locate a provided API key, which is a reasonable level of persistence for this function.

What to consider before installing

This skill appears to implement a Tavily search helper, but there are mismatches you should address before trusting it: (1) The script requires a TAVILY_API_KEY but the skill metadata does not declare any required env var—make sure you only supply a key you control and understand the key's scope. (2) The metadata lists curl as required even though the code never uses it; treat that as a metadata error. (3) The script looks for keys in ~/.openclaw/.env, ~/.env, and .env — ensure those files do not contain other sensitive secrets and set restrictive file permissions. (4) The script sends the API key in the JSON payload to https://api.tavily.com/search over HTTPS; verify the tavily.com homepage and API docs to confirm this is the intended usage and that the service is trustworthy. (5) Minor usability note: example commands in SKILL.md use unexpanded ~ in subprocess calls which may not work as written. If you plan to install/use this skill, obtain the API key from tavily.com directly, verify the source (owner/publisher), update the skill metadata to list TAVILY_API_KEY as a required credential and remove unused binary requirements, and prefer storing keys with appropriate permissions rather than echoing them into shared dotfiles.

Tavily Search - 智能搜索工具

基于Tavily API的网络搜索skill，提供高质量的AI增强搜索结果。

Features

• ✅ 无需信用卡 - 每月1000次免费查询
• 🤖 AI增强 - 自动提取关键信息，生成摘要
• 🔬 深度研究模式 - 多源综合分析
• 📚 学术友好 - 适合研究和信息收集
• 🌐 多语言支持 - 中英文搜索优化

Setup

1. 获取API Key

1. 访问 https://tavily.com/
2. 注册账号（邮箱即可，无需绑卡）
3. 在Dashboard复制API Key

2. 配置OpenClaw

# 设置环境变量
export TAVILY_API_KEY="tvly-..."

# 或者写入配置文件
echo 'TAVILY_API_KEY=tvly-...' >> ~/.openclaw/.env

Usage

基础搜索

# 搜索最新AI新闻
python3 ~/.openclaw/skills/tavily-search/scripts/search.py "AI artificial intelligence news today"

# 中文搜索
python3 ~/.openclaw/skills/tavily-search/scripts/search.py "人工智能最新进展" --lang zh

Python调用

import subprocess
import json

result = subprocess.run(
    ['python3', '~/.openclaw/skills/tavily-search/scripts/search.py', 
     '你的搜索词', '--json'],
    capture_output=True, text=True
)
data = json.loads(result.stdout)

Parameters

参数	说明	默认值
query	搜索关键词	必填
--max-results	返回结果数量 (1-20)	5
--search-depth	搜索深度 (basic/advanced)	basic
--include-answer	包含AI生成的答案	True
--include-images	包含相关图片	False
--days	时间范围（天）	无限制
--lang	语言偏好 (zh/en)	auto
--json	JSON格式输出	False

Examples

AI新闻搜索

python3 scripts/search.py "OpenAI GPT-5 release" --days 7 --include-answer

学术研究

python3 scripts/search.py "transformer architecture survey" \
  --search-depth advanced --max-results 10

技术问题

python3 scripts/search.py "Docker compose networking tutorial" \
  --include-answer --lang zh

Free Tier Limits

• 每月1000次API调用
• 每次最多20个结果
• 基础搜索深度
• 学生可申请更多额度

Response Format

{
  "query": "搜索词",
  "answer": "AI生成的综合答案（可选）",
  "results": [
    {
      "title": "标题",
      "url": "链接",
      "content": "内容摘要",
      "score": 0.95,
      "published_date": "2024-03-01"
    }
  ],
  "images": [...]
}

Notes

• 首次使用需要先配置TAVILY_API_KEY
• 建议将API key添加到~/.openclaw/.env
• 超过免费额度后会返回错误提示