Tavily Proxy Search

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:37 PM UTC
• Version:
  1.0.0

Overview

This is a disclosed Tavily proxy search helper, but users should protect the proxy URL and master key.

Install only if you operate or trust the TavilyProxyManager endpoint. Prefer localhost or HTTPS for TAVILY_PROXY_URL, avoid untrusted proxy hosts, and use the least-privileged key available rather than a high-value production master key when possible.

SkillSpector

By NVIDIA

Vulnerability Patterns

• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 89% confidence
• Finding: The skill documentation describes capabilities to read secrets from environment variables or ~/.openclaw/.env and send authenticated requests over the network, but no explicit permissions are declared. This creates a real security gap because users and policy systems are not informed that the skill can access credentials and exfiltrate them to a remote endpoint, even if the intended purpose is legitimate web search through a self-hosted proxy.

VirusTotal

65/65 vendors flagged this skill as clean.