Tavily Search Litiao
AI-optimized web search via Tavily API. Returns concise, relevant results for AI agents.
MIT-0 · Free to use, modify, and redistribute. No attribution required.
⭐ 0 · 34 · 1 current installs · 1 all-time installs
MIT-0
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (AI-optimized web search) matches required items and code. The scripts call https://api.tavily.com/search and /extract and require TAVILY_API_KEY and node — all reasonable and expected for this purpose.
Instruction Scope
SKILL.md instructs the agent to run the provided search and extract scripts, which only POST queries/URLs to Tavily and print results. This stays within the skill's stated scope. Note: user queries and any URLs you pass to the extract script are transmitted to Tavily (data exposure risk).
Install Mechanism
No install spec; the skill is instruction-only with bundled Node scripts. It relies on a local node binary being present — a low-risk, expected requirement. No downloads from external/untrusted URLs or archive extraction are present.
Credentials
Only one credential is required: TAVILY_API_KEY (declared as primary). That directly matches the API usage in the scripts; there are no unrelated or excessive environment variables or config paths requested.
Persistence & Privilege
The skill does not request always:true, does not modify system or other skills, and is user-invocable. Default autonomous invocation is enabled (platform default) but is not combined with other red flags here.
Assessment
This skill appears coherent with its description. Before installing, be aware that any search queries and any URLs you pass to the extract command will be sent to Tavily's API (https://api.tavily.com) along with your TAVILY_API_KEY — treat that as data you are sharing with a third party. Ensure you trust Tavily's privacy/security practices and do not send sensitive secrets or private documents. Confirm you have node available. If you prefer the agent not call the external API autonomously, consider disabling model-invocation for the skill or only invoking it manually.scripts/extract.mjs:18
Environment variable access combined with network send.
scripts/search.mjs:42
Environment variable access combined with network send.
Confirmed safe by external scanners
Static analysis detected API credential-access patterns, but both VirusTotal and OpenClaw confirmed this skill is safe. These patterns are common in legitimate API integration skills.Like a lobster shell, security has layers — review code before you run it.
Current versionv1.0.0
Download ziplatest
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🔍 Clawdis
Binsnode
EnvTAVILY_API_KEY
Primary envTAVILY_API_KEY
SKILL.md
Tavily Search
AI-optimized web search using Tavily API. Designed for AI agents - returns clean, relevant content.
Search
node {baseDir}/scripts/search.mjs "query"
node {baseDir}/scripts/search.mjs "query" -n 10
node {baseDir}/scripts/search.mjs "query" --deep
node {baseDir}/scripts/search.mjs "query" --topic news
Options
-n <count>: Number of results (default: 5, max: 20)--deep: Use advanced search for deeper research (slower, more comprehensive)--topic <topic>: Search topic -general(default) ornews--days <n>: For news topic, limit to last n days
Extract content from URL
node {baseDir}/scripts/extract.mjs "https://example.com/article"
Notes:
- Needs
TAVILY_API_KEYfrom https://tavily.com - Tavily is optimized for AI - returns clean, relevant snippets
- Use
--deepfor complex research questions - Use
--topic newsfor current events
Files
4 totalSelect a file
Select a file to preview.
Comments
Loading comments…
