ClawHub

Tavily Search

v7.0.0

Search the web using Tavily's Search API. Returns relevant, accurate results with content snippets, scores, and metadata. Use when the user asks to search th...

⭐ 1· 586·6 current·6 all-time
by@evanydl
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description, required binary (curl), required env var (TAVILY_API_KEY), and the provided script all align with a web-search API wrapper that posts JSON to https://api.tavily.com/search.
✓
Instruction Scope
SKILL.md and scripts/search.sh only read the provided JSON argument and the TAVILY_API_KEY environment variable and POST them to Tavily's API. There are no instructions to read unrelated files, scan system state, or transmit data to other endpoints.
✓
Install Mechanism
No install spec is present (instruction-only plus a small script). Nothing is downloaded or written by an installer, minimizing disk-write risk.
✓
Credentials
Only a single API credential (TAVILY_API_KEY) is required and declared as the primary credential. That is proportionate for a service that authenticates with a bearer key.
✓
Persistence & Privilege
always:false (default) and no requests to modify agent or system configs are present. Autonomous invocation is allowed by platform default but is not combined with broad privileges here.
Assessment
This skill appears to do exactly what it says: send your search JSON to Tavily's search API using the TAVILY_API_KEY. Before installing, ensure you trust Tavily as a receiver of your queries (they will see your search text and any included options). Keep the API key secret, rotate/revoke it if exposed, and avoid sending sensitive personal data or credentials in the JSON body (the SKILL.md already warns against that). If you need stricter control, disable autonomous invocation for this skill or audit calls that set include_raw_content (which can return full page content). Finally, verify the official Tavily documentation and your organization’s policies on third-party search services.

Like a lobster shell, security has layers — review code before you run it.

aivk973j029r2svzgw3wsd6pacnf5834hn8latestvk970pvma79brbxvhw2n8rvvv2n834012searchvk973j029r2svzgw3wsd6pacnf5834hn8tavilyvk973j029r2svzgw3wsd6pacnf5834hn8webvk973j029r2svzgw3wsd6pacnf5834hn8

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

Binscurl
EnvTAVILY_API_KEY
Primary envTAVILY_API_KEY

Comments