Tinyfish Search

Run web searches via TinyFish Search API and get structured JSON results (title, snippet, URL) ready for LLM consumption. Use when you need fresh web search...

Security Scan

The skill's requests and instructions are consistent with a simple web-search integration: it only needs a TinyFish API key and issues HTTP requests to the documented TinyFish endpoint.

Purpose & Capability

Name and description match the actual behavior: SKILL.md and scripts/search.sh only perform HTTP queries to api.search.tinyfish.ai and return structured JSON. No unrelated credentials, binaries, or config paths are requested.

Instruction Scope

Runtime instructions explicitly check for TINYFISH_API_KEY and then call the TinyFish API via curl. They do not instruct reading arbitrary files, other env vars, or contacting unexpected endpoints. The guidance 'Do NOT fall back to other search tools' is a policy preference but not a security concern.

Install Mechanism

There is no install spec and only a small helper script is included. No external downloads, package installs, or archive extraction are present.

Credentials

Only TINYFISH_API_KEY is required, which is proportionate to calling a third‑party search API. The scripts also explicitly fail if the key is unset; no other secrets or unrelated env vars are referenced.

Persistence & Privilege

The skill is not always-enabled and does not request elevated or persistent system privileges. It does not modify other skills or system configuration. Autonomous invocation is allowed (default) but not combined with other concerning factors.

Assessment

This skill will send any query and the provided TINYFISH_API_KEY to api.search.tinyfish.ai using curl. Before installing, verify you trust TinyFish (review https://docs.tinyfish.ai/search-api), ensure the API key has appropriate scope/quotas, and monitor usage/billing. Avoid sending highly sensitive secrets or proprietary data through this search provider. If you prefer explicit user consent before network calls, keep autonomous invocation off or limit when the agent may call this skill.

Search the web via the TinyFish Search API. Returns a JSON array of ranked results with title, snippet, site name, and URL.

Requires: TINYFISH_API_KEY environment variable.

Pre-flight Check (REQUIRED)

Before calling the API, verify the key is present:

[ -n "$TINYFISH_API_KEY" ] && echo "TINYFISH_API_KEY is set" || echo "TINYFISH_API_KEY is NOT set"

If the key is not set, stop and ask the user to add it. Get one at https://agent.tinyfish.ai/api-keys. Do NOT fall back to other search tools.

Basic Search

curl -G "https://api.search.tinyfish.ai" \
  -H "X-API-Key: $TINYFISH_API_KEY" \
  --data-urlencode "query=web automation tools"

Geo / Language Targeting

curl -G "https://api.search.tinyfish.ai" \
  -H "X-API-Key: $TINYFISH_API_KEY" \
  --data-urlencode "query=boulangerie paris" \
  --data-urlencode "location=FR" \
  --data-urlencode "language=fr"

Helper Script

scripts/search.sh <query> [--location CC] [--language LL] wraps the curl call:

scripts/search.sh "top trending openclaw youtube video"
scripts/search.sh "boulangerie paris" --location FR --language fr

Response Shape

{
  "query": "web automation tools",
  "results": [
    {
      "position": 1,
      "site_name": "example.com",
      "title": "Top 10 Web Automation Tools",
      "snippet": "A preview of the page content…",
      "url": "https://example.com/top-automation"
    }
  ],
  "total_results": 1234
}

Use results[] directly — each entry already has everything needed to cite or open the source.