Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Tavily + Zhipu Web Search

v1.0.0

统一网络搜索(Tavily 优先 + 智谱兜底)。当用户需要搜索最新新闻、实时信息、查询网络资料时使用此 skill。优先 Tavily(分钟级实时),失败自动回退智谱 MCP web_search_prime(Coding Plan 免费额度)。

0· 99·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for mydearzsy/tavily-zhipu-search.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Tavily + Zhipu Web Search" (mydearzsy/tavily-zhipu-search) from ClawHub.
Skill page: https://clawhub.ai/mydearzsy/tavily-zhipu-search
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install tavily-zhipu-search

ClawHub CLI

Package manager switcher

npx clawhub@latest install tavily-zhipu-search
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description, SKILL.md, and the bundled Python script all implement a unified web search using Tavily (primary) and Zhipu (fallback). Required inputs (TAVILY_API_KEY, ZHIPU_API_KEY or reading openclaw.json) are consistent with that purpose.
Instruction Scope
Runtime instructions direct the agent to run the included Python script which performs network calls to the documented endpoints (api.tavily.com and open.bigmodel.cn). The script also attempts to read ~/.openclaw/openclaw.json to find a Zhipu key if ZHIPU_API_KEY is not set; this behaviour is documented in SKILL.md but is the only non-network file read.
Install Mechanism
No install spec; the skill is instruction-only with a single Python script. Nothing is downloaded or written to disk by an installer.
Credentials
The skill does not require global credentials; it uses TAVILY_API_KEY and ZHIPU_API_KEY as expected. One caveat: if ZHIPU_API_KEY is not set the script will parse ~/.openclaw/openclaw.json and return the first apiKey it finds under providers 'generic' or 'glm' — this can surface keys stored for other providers if present. This behavior is documented but users should be aware.
Persistence & Privilege
always is false and the skill does not modify other skills or system settings. It does not persist tokens or alter configuration beyond reading the openclaw.json config file.
Assessment
This skill appears to do exactly what it claims: send your query to Tavily first and fall back to Zhipu. Before installing, decide whether you trust the external services (api.tavily.com and open.bigmodel.cn) to handle your queries. If you do not want this skill to read keys from your OpenClaw config, set ZHIPU_API_KEY explicitly or remove sensitive apiKey entries from ~/.openclaw/openclaw.json. No installers or hidden downloads are present, and the skill does not request unrelated credentials or system changes.

Like a lobster shell, security has layers — review code before you run it.

latestvk971cdgh9w62kf7kqd5j0ez9q584g4sp
99downloads
0stars
1versions
Updated 2w ago
v1.0.0
MIT-0

Web Search(统一搜索)

Tavily 优先,智谱兜底。一个命令搞定。

使用

python3 ~/.openclaw/skills/web-search/scripts/search.py "搜索关键词"
python3 ~/.openclaw/skills/web-search/scripts/search.py "关键词" --days=1

回退逻辑

  1. Tavily(需 TAVILY_API_KEY)→ 实时,分钟级更新,含 AI 摘要
  2. 智谱 Zhipu(需 ZHIPU_API_KEY)→ Coding Plan 免费搜索额度
  3. 两者都不可用 → 报错

环境变量

变量用途必需
TAVILY_API_KEYTavily 搜索 API推荐配置
ZHIPU_API_KEY智谱 Coding Plan自动从 openclaw.json 读取

Comments

Loading comments...