ClawHub

Tavily Search

v1.0.1

Web search using Tavily's LLM-optimized API. Returns relevant results with content snippets, scores, and metadata.

⭐ 91· 35.9k·263 current·273 all-time
byLiang@matthew77
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the included script and declared requirements. The only required binary is node and the only required env var is TAVILY_API_KEY, both necessary for calling Tavily's API.
✓
Instruction Scope
SKILL.md instructs the agent to set the Tavily API key and run the provided Node script with query options. Instructions do not ask the agent to read unrelated files, other env vars, or send data to endpoints outside api.tavily.com.
✓
Install Mechanism
No install spec (instruction-only) and a small included script; nothing is downloaded from third-party URLs or written to disk beyond the script itself.
✓
Credentials
Only TAVILY_API_KEY is required and is used directly as a Bearer token to authenticate to api.tavily.com. No other credentials, secret-named env vars, or config paths are requested.
✓
Persistence & Privilege
Skill is not marked always:true and does not modify system or other skills. disable-model-invocation is false (normal); the skill can be invoked autonomously by the agent, which is expected behavior for skills.
Assessment
This skill appears to be a straightforward wrapper around Tavily's search API. Before installing, confirm you trust tavily.com and understand that any query you run (and, if enabled, the --raw-content option) will be sent to api.tavily.com along with your TAVILY_API_KEY. Keep the API key secret, check Tavily's privacy and usage policies, and verify rate limits or billing tied to the key. If you are concerned about autonomous agent invocation, consider disabling autonomous use (disable-model-invocation) or only enabling the skill when you explicitly call it. Finally, verify the skill source (homepage and publisher) if you require stronger provenance guarantees.

Like a lobster shell, security has layers — review code before you run it.

latestvk97dnbych2b8dxn15w9vj91y1h824mz7

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🔍 Clawdis
Binsnode
EnvTAVILY_API_KEY
Primary envTAVILY_API_KEY

Comments