Openclaw Tavily Search 0.1.0

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:21 PM UTC
• Version:
  1.0.0

Overview

This is a straightforward Tavily web-search helper, with normal third-party query and API-key privacy considerations.

Install only if you are comfortable providing a Tavily API key and sending search queries to Tavily. Avoid using it for secrets, private internal project names, personal data, or confidential research unless that external sharing is acceptable in your environment.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 92% confidence
• Finding: The skill documentation instructs use of environment variables, reading a local ~/.openclaw/.env file, and making outbound network requests, but it does not declare corresponding permissions. That creates a transparency and policy-enforcement gap: an agent or platform may invoke capabilities affecting secrets, local files, and external services without an explicit permission contract.

Missing User Warnings

Low

• Confidence: 84% confidence
• Finding: The skill is explicitly designed to send user-supplied search queries to Tavily, but the documentation does not clearly warn that those queries leave the local environment and are transmitted to a third-party API. This can expose sensitive prompts, internal project names, or personal data if users assume the search is local or do not realize an external provider receives the query.

VirusTotal

66/66 vendors flagged this skill as clean.