Back to skill
Skillv1.0.0
VirusTotal security
Tavily Search Secure · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 30, 2026, 4:55 AM
- Hash
- b19b4d6a5b58d50c0a4ea3d888b5aa9ab9c1b8e32303f49d4080ea94e03d0ac6
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: tavily-search-secure Version: 1.0.0 The skill bundle is benign. It provides secure web search and URL content extraction using the Tavily API. The `SKILL.md` file includes explicit security rules, which are robustly implemented in `scripts/extract.mjs` and `scripts/search.mjs`. Key security features include strict URL validation (rejecting private IPs, loopback, localhost, and non-http/https protocols to prevent SSRF), sanitization of all inputs and outputs, and proper handling of the API key via environment variables. There is no evidence of malicious intent, data exfiltration beyond the stated purpose, or prompt injection attempts against the agent.
- External report
- View on VirusTotal