Tavily

Tavily integration. Manage data, records, and automate workflows. Use when the user wants to interact with Tavily data.

This skill is coherent: it delegates auth and API calls to the Membrane CLI and does not ask for unrelated secrets. Before installing/running: (1) Verify the CLI package (@membranehq/cli) and its GitHub repository to ensure you trust the publisher; prefer running via npx for one-off usage if you want to avoid a global install. (2) Be aware that Membrane will broker your credentials and see the connections you create—review Membrane's privacy/security documentation. (3) In headless environments you’ll need to complete the login flow manually (open an authorization URL). If you’re uncomfortable installing third-party CLIs or delegating credentials to a brokered service, do not install and instead interact with Tavily via documented direct APIs.

Type: OpenClaw Skill Name: tavily-integration Version: 1.0.1 The skill instructs the AI agent to perform high-privilege operations, including installing a global npm package (@membranehq/cli) and authenticating with an external platform (Membrane). While these actions are aligned with the stated purpose of integrating Tavily, the requirement for global software installation and the redirection of all API interactions through a third-party service introduces significant supply chain risks and environment-level changes. The instructions in SKILL.md effectively move the agent's execution logic and credential management to an external, unvetted platform.