Tavily AI Search

AI-optimized web search using Tavily Search API. Use when you need comprehensive web research, current events lookup, domain-specific search, or AI-generated answer summaries. Tavily is optimized for LLM consumption with clean structured results, answer generation, and raw content extraction. Best for research tasks, news queries, fact-checking, and gathering authoritative sources.

Install only if you are comfortable sending search queries to Tavily under your API key. Prefer TAVILY_API_KEY or a secure config store, avoid putting keys directly on shared command lines, pin or review tavily-python before use in sensitive environments, and treat search results or curled pages as untrusted until verified.

Type: OpenClaw Skill Name: tavily Version: 1.0.0 The skill bundle provides a Python script for interacting with the Tavily search API, which appears benign and correctly handles API keys. However, the `SKILL.md` documentation includes an 'Integration Patterns' example demonstrating how to chain the search results with `jq` and `curl` to fetch raw content from URLs (`scripts/tavily_search.py "React documentation" --json | jq -r '.results[].url' | xargs -I {} curl -s {}`). While presented as a legitimate content extraction method, this example highlights the agent's capability to execute arbitrary network requests (`curl`) based on search results, which is a high-risk primitive that could be exploited by a malicious prompt to access or exfiltrate data from unintended external or internal network resources. This capability, though not explicitly malicious in its stated purpose, makes the skill suspicious due to the potential for misuse via prompt injection.