联网搜索一键配置 · Tavily One-Step

联网搜索, 网页搜索, 实时联网, 一键配置。让 OpenClaw 用 Tavily 实现实时搜索（含免费额度）。One-step install + guided key setup. Guide: github.com/plabzzxx/openclaw-tavily-search

This skill appears to implement a legitimate Tavily-backed web search tool, but take three precautions before installing or letting an agent run it: 1) Understand privacy: queries, URLs and full extracted page content will be sent to https://api.tavily.com — do not send sensitive data unless you trust Tavily's policies. 2) Secrets handling: the script reads TAVILY_API_KEY from the environment or ~/.openclaw/.env and the onboarding allows the agent to write that file if you ask; prefer to manually add the API key yourself and avoid pasting secrets into chat. 3) Metadata mismatch: the registry did not declare the required TAVILY_API_KEY — treat that as an oversight and verify the key requirement and the code before trusting the skill. Recommended steps: review scripts/tavily_search.mjs yourself, confirm you consent to storing the API key in ~/.openclaw/.env (or keep it in a secure secret manager), check Tavily's privacy/terms, and explicitly instruct the agent not to write secrets to disk unless you approve.

Type: OpenClaw Skill Name: tavily-one-step-search Version: 1.0.3 The skill provides a legitimate interface for the Tavily Search API, enabling web search, content extraction, and site crawling. The implementation in `scripts/tavily_search.mjs` is a clean Node.js script that communicates exclusively with `api.tavily.com` and handles API keys via standard environment variables or a local configuration file (`~/.openclaw/.env`). The documentation and agent instructions are well-structured, focusing on guided setup and functional usage without any evidence of malicious intent, data exfiltration, or harmful prompt injection.