Tavily Extract

Extract content from specific URLs using Tavily's extraction API. Returns clean markdown/text from web pages. Use when you have specific URLs and need their...

This skill generally does what it says (calls Tavily to extract pages), but it has important gaps you should consider before installing: - It will try to read ~/.mcp-auth/*_tokens.json and extract access_token values; those files can contain other cached auth tokens — only proceed if you trust the skill and the Tavily issuer check in the script. - The script will run `npx -y mcp-remote ...` to perform OAuth if no token is found. That downloads and executes code from npm at runtime; review the mcp-remote package (or avoid letting the script run it) if you want to reduce risk. - The metadata didn't list runtime dependencies, but the script requires jq, curl, npx, and standard Unix tools; ensure those are present and safe. - For minimal exposure, consider creating and providing a dedicated TAVILY_API_KEY (set the env yourself) rather than allowing the script to scan ~/.mcp-auth or auto-run npx. If you need higher assurance, ask the skill author to: (1) declare required binaries/env in metadata, (2) avoid on-demand npx installs or document the exact npm package & version, and (3) limit or make optional any recursive scans of ~/, or at least clearly describe what files will be read.

Type: OpenClaw Skill Name: tavily-extract Version: 1.0.0 The skill facilitates web content extraction via the Tavily API and MCP protocol. The `extract.sh` script manages authentication by retrieving tokens from `~/.mcp-auth/` or initiating an OAuth flow using `npx mcp-remote`, with explicit checks to ensure tokens are issued by `tavily.com`. All network and file operations are directly related to the stated purpose of content extraction and authentication, and the script uses `jq` to safely handle JSON inputs.