ClawHub

Tavily

v0.1.1

Use Tavily web search/discovery to find URLs/sources, do lead research, gather up-to-date links, or produce a cited summary from web results.

⭐ 4· 7.4k·84 current·94 all-time
by@tylordius
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the actual behavior: the scripts perform POST requests to https://api.tavily.com/search and require only TAVILY_API_KEY. No unrelated services, binaries, or config paths are requested.
✓
Instruction Scope
SKILL.md instructs running the included CLI and only references the TAVILY_API_KEY env var and the bundled scripts. The runtime instructions do not request reading other files, secrets, or system state, nor do they send data to endpoints other than the Tavily API.
✓
Install Mechanism
No install spec is provided (instruction-only with bundled scripts). Nothing is downloaded or extracted during install, and the code shipped with the skill is small and self-contained.
✓
Credentials
Only a single credential (TAVILY_API_KEY) is required, which is appropriate for calling the Tavily API. No additional tokens, secrets, or config paths are requested.
✓
Persistence & Privilege
The skill is not marked always:true and does not modify other skills or system-wide settings. It has normal autonomous-invocation defaults but requests no elevated persistence.
Assessment
This skill appears coherent and limited to calling the Tavily search API. Before installing: (1) confirm you trust api.tavily.com and the skill’s author, (2) store TAVILY_API_KEY in a secure secret store (not in public scripts), and use a least-privilege or revocable key if the service supports it, (3) review and run the included scripts in a safe environment to verify behavior (they POST your query and API key only to the Tavily endpoint), and (4) be aware the agent may invoke the skill autonomously by default — if you are uncomfortable with that, disable autonomous invocation in the agent settings.

Like a lobster shell, security has layers — review code before you run it.

latestvk978a4ag6xec4jjygsyjkwmfp58216de

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

EnvTAVILY_API_KEY
Primary envTAVILY_API_KEY

Comments