← 返回 Skills 市场

Chen Tavily Search

Name: Chen Tavily Search
Author: cs995279497-byte

作者 cs995279497-byte · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ⚠ suspicious

148

总下载

当前安装

版本数

在 OpenClaw 中安装

/install chen-tavily-search

功能描述

Web search using Tavily's LLM-optimized API. Returns relevant results with content snippets, scores, and metadata.

使用说明 (SKILL.md)

Tavily Search

Search the web and get relevant results optimized for LLM consumption.

Authentication

Get your API key at https://tavily.com and add to your OpenClaw config:

{
  "skills": {
    "entries": {
      "tavily-search": {
        "enabled": true,
        "apiKey": "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"
      }
    }
  }
}

Or set the environment variable:

export TAVILY_API_KEY="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"

Quick Start

Using the Script

node {baseDir}/scripts/search.mjs "query"
node {baseDir}/scripts/search.mjs "query" -n 10
node {baseDir}/scripts/search.mjs "query" --deep
node {baseDir}/scripts/search.mjs "query" --topic news

Examples

# Basic search
node {baseDir}/scripts/search.mjs "python async patterns"

# With more results
node {baseDir}/scripts/search.mjs "React hooks tutorial" -n 10

# Advanced search
node {baseDir}/scripts/search.mjs "machine learning" --deep

# News search
node {baseDir}/scripts/search.mjs "AI news" --topic news

# Domain-filtered search
node {baseDir}/scripts/search.mjs "Python docs" --include-domains docs.python.org

Options

Option	Description	Default
`-n \x3Ccount>`	Number of results (1-20)	10
`--depth \x3Cmode>`	Search depth: `ultra-fast`, `fast`, `basic`, `advanced`	`basic`
`--topic \x3Ctopic>`	Topic: `general` or `news`	`general`
`--time-range \x3Crange>`	Time range: `day`, `week`, `month`, `year`	-
`--include-domains \x3Cdomains>`	Comma-separated domains to include	-
`--exclude-domains \x3Cdomains>`	Comma-separated domains to exclude	-
`--raw-content`	Include full page content	false
`--json`	Output raw JSON	false

Search Depth

Depth	Latency	Relevance	Use Case
`ultra-fast`	Lowest	Lower	Real-time chat, autocomplete
`fast`	Low	Good	Need chunks but latency matters
`basic`	Medium	High	General-purpose, balanced
`advanced`	Higher	Highest	Precision matters, research

Tips

Keep queries under 400 characters - Think search query, not prompt
Break complex queries into sub-queries - Better results than one massive query
Use --include-domains to focus on trusted sources
Use --time-range for recent information
Filter by score (0-1) to get highest relevance results

安全使用建议

The code itself behaves like a normal Tavily search client (it expects TAVILY_API_KEY and calls api.tavily.com). However, the skill metadata incorrectly lists a concrete API-key-looking string as a required environment variable and primary credential instead of the env var name. Before installing: (1) Do not assume the long string in the manifest is a safe default key — treat it as potentially sensitive. Prefer supplying your own API key via TAVILY_API_KEY or the OpenClaw skill config. (2) Verify the skill owner and homepage (https://tavily.com) and confirm the correct variable name (TAVILY_API_KEY). (3) Contact the publisher to fix the manifest misconfiguration or to confirm whether the embedded key is intentional; if you or your organization already used the embedded key, rotate it. (4) Only proceed if you trust Tavily and the skill publisher. The skill is not clearly malicious, but the manifest/key inconsistencies are suspicious and should be resolved first.

功能分析

Type: OpenClaw Skill Name: chen-tavily-search Version: 1.0.0 The skill bundle contains a hardcoded Tavily API key (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) exposed within the SKILL.md documentation and the _meta.json metadata fields. While the core logic in scripts/search.mjs is a functional wrapper for the Tavily API and lacks evidence of intentional malice or data exfiltration, the inclusion of active credentials constitutes a significant security vulnerability and improper secret management.

能力评估

ℹ Purpose & Capability

The name, description, SKILL.md, and scripts/search.mjs are coherent: the script needs node and an API key and calls https://api.tavily.com/search to return results. Requiring 'node' is expected. However, the registry metadata lists a long string that looks like an API key as a required env var and as primaryEnv rather than a variable name (e.g., TAVILY_API_KEY), which is inconsistent with the actual code and SKILL.md.

✓ Instruction Scope

SKILL.md instructs only how to supply an API key, set options, and run the included Node script. The script reads only process.env.TAVILY_API_KEY and CLI args, posts search requests to api.tavily.com, and prints results. It does not attempt to read unrelated files, credentials, or system paths.

✓ Install Mechanism

This is an instruction-only skill with a small included Node script and no install spec. No downloads or archive extraction are requested. Risk from installation is low.

⚠ Credentials

The manifest/metadata declares a long API-key-looking string as a required env var and as primaryEnv instead of declaring the variable name (TAVILY_API_KEY). SKILL.md and the script correctly expect the TAVILY_API_KEY environment variable. This mismatch could be an accidental misconfiguration, or it could indicate an embedded/hardcoded developer key in the manifest—either way it is disproportionate and should be clarified. If the listed string is a real reusable key, it could be abused by anyone using the skill.

✓ Persistence & Privilege

The skill does not request always:true and does not modify other skills or system settings. It does not require persistent agent-level privileges beyond normal execution.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install chen-tavily-search
安装完成后，直接呼叫该 Skill 的名称或使用 /chen-tavily-search 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial release of chen-tavily-search: web search via Tavily API optimized for LLMs. - Performs web search with configurable depth, topics, time range, and domain filters. - Returns relevant results with content snippets, scores, and metadata. - Supports multiple output modes including raw JSON and full content. - Easy setup via API key in config or environment variable. - Includes detailed usage examples and best practices.

元数据

Slug chen-tavily-search

版本 1.0.0

许可证 MIT-0

累计安装 1

当前安装数 0

历史版本数 1

常见问题