Tavily Best Practices
v1.0.0Build production-ready Tavily integrations with best practices baked in. Reference documentation for developers using coding assistants (Claude Code, Cursor,...
⭐ 0· 238·0 current·0 all-time
by@evanydl
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name and description promise Tavily integration best practices and the files are a detailed SDK and integration guide for search, extract, crawl, map, and research — which matches the stated purpose. There are no unexpected binaries or privileged hooks requested by the skill itself.
Instruction Scope
The SKILL.md and reference files are instructional samples and code snippets (pip/npm install, client usage, async patterns, crawling and research flows). They do not instruct the agent to read arbitrary local files or exfiltrate data, but many examples reference environment variables, external services, and connecting to external resources (e.g., MongoDB URIs, OpenAI/Cohere keys, proxies). Those are example usage patterns rather than instructions the skill will autonomously execute, but users should be aware code snippets may prompt developers to provide credentials or connection strings when they copy them into real applications.
Install Mechanism
This is an instruction-only skill with no install spec and no code files to execute. Nothing is written to disk by the skill itself — lowest install risk.
Credentials
The skill declares no required environment variables, which is consistent for a docs-only skill. However the documentation repeatedly shows TAVILY_API_KEY (and in integration examples references OPENAI_API_KEY, CO_API_KEY, MongoDB connection URIs, etc.). These example credentials are expected for the demonstrated integrations but are not required by the skill itself — users should not supply keys to this skill unless they intend to run the corresponding client code.
Persistence & Privilege
The skill does not request persistent presence (always:false) and does not attempt to modify other skills or system-wide settings. Autonomous invocation is enabled by default but is not coupled with any additional privileges or credential requests here.
Assessment
This skill is documentation for the Tavily SDK and integrations (search, extract, crawl, research). It is instruction-only and does not itself request or store secrets, but example code shows using TAVILY_API_KEY and other service keys (OpenAI, Cohere, MongoDB URIs). Before copying examples into real projects: only use real API keys with the official Tavily SDK, avoid pasting secrets into public places, and review any integration that stores web results in databases (e.g., save_foreign=True) to ensure you control where data and credentials are sent. If you want the agent to make live Tavily calls, plan to provide a Tavily API key deliberately and only to trusted code paths.Like a lobster shell, security has layers — review code before you run it.
latestvk97exye50n3aq8st6jd9mw5vmh82m66d
License
MIT-0
Free to use, modify, and redistribute. No attribution required.