Tavily Search

Tavily 搜索引擎集成，支持 web 搜索、内容提取、实时新闻查询等功能。使用场景：需要搜索最新网络信息、查找实时新闻、获取专业资料、验证事实准确性等。

This skill is coherent with its description: it will read a TAVILY_API_KEY from a .env file in the skill folder and make HTTPS calls to api.tavily.com, consuming your Tavily credits. Before installing: (1) Verify you trust the Tavily service and the skill source (no homepage or known owner listed). (2) Keep only the API key in the .env (don’t put other secrets there), and use a limited-scope API key if Tavily supports it. (3) Be aware the script disables some urllib3/TLS warnings — this may hide TLS/certificate issues, so confirm network calls go to the legitimate Tavily domain. (4) Run pip installs in an isolated environment (venv) and monitor API usage/credit consumption. If you want higher assurance, inspect the file scripts/search.py locally (it’s small and readable) or run it in an isolated container with a rotated API key.

Type: OpenClaw Skill Name: tavilysearch Version: 1.0.4 The skill bundle provides a standard and well-documented integration for the Tavily Search API. The Python script `scripts/search.py` implements core functionalities like web searching, content extraction, and site crawling by making authorized HTTP requests to the official `api.tavily.com` endpoints. There is no evidence of data exfiltration, malicious execution, or prompt injection; the code specifically limits environment variable access to the required `TAVILY_API_KEY` and lacks any obfuscation or unauthorized network activity.