Valyu Search

This skill appears to be a straightforward wrapper around Valyu's API and only needs node plus your VALYU_API_KEY, but consider the following before installing: - The included script will save your API key to ~/.valyu/config.json if you run the setup command; ensure you are comfortable storing the key on disk in that location. - The SKILL.md suggests putting the key in the Gateway env or ~/.openclaw/.env, but the script actually checks process.env and ~/.valyu/config.json — documentation and code differ. Confirm where your agent/runtime will provide the env var so the right key is used. - DeepResearch supports a webhookUrl option: if you supply an external webhook, results (potentially including extracted page contents) may be POSTed there. Only use webhooks you control and trust. - The provided file excerpt in the prompt was truncated. I could not inspect the full script content; review the complete scripts/valyu.mjs in the skill bundle to confirm there are no unexpected network endpoints, obfuscated code, or extra filesystem access before trusting the skill fully. - Principle of least privilege: only provide an API key that you intend for this use, and confirm Valyu's billing/usage expectations (the script references cost/deduction fields). If you verify the full script and are comfortable with the key storage behavior and webhook implications, the skill is consistent with its stated purpose. If you cannot review the entire file, consider treating it as untrusted until a full inspection is possible.