Tavily Plus

Enhanced Tavily search with multi-API key rotation, AI-powered intent recognition, sub-question decomposition, intelligent summarization, and offline documen...

What to check before installing or enabling this skill: - Expectation vs reality: The registry claims no required environment variables, but the skill actually needs Tavily API keys. Provide keys either in plugins.entries.tavily.config.webSearch.apiKey or via env vars (TAVILY_API_KEY, TAVILY_API_KEY_2, etc.). Confirm the packaging/registry metadata is corrected before trusting the skill. - Config vs env mismatch: SKILL.md states it will read plugin config, but the shipped script only reads environment variables (and TAVILY_BASE_URL). If you want to use the configured plugin entry, ask the author to implement loading from plugins.entries.tavily.config; otherwise supply env vars. - Key rotation and metadata: The code rotates keys on 429 but limits retries (the recursion halts after 6 attempts even if more keys are available) and the final response does not include which key was used despite SKILL.md promising that. If you rely on per-key telemetry or failover behavior, request fixes or test rotation under load. - File writes: Offline export creates files under ~/.openclaw/workspace/reports. If you enable export_doc/exportDoc, review the generated reports for sensitive data before sharing. Run in a sandbox or with a dedicated workspace path if you have concerns. - Runtime assumptions: The script uses fetch and AbortSignal.timeout (Node 18+). Ensure your agent runtime provides compatible Node globals. - Limited risk but check provenance: No external installers or obfuscated code are present, and network calls are only to the Tavily base URL (default https://api.tavily.com or TAVILY_BASE_URL). Still verify the skill author/source since the package metadata/homepage are missing. If you are not comfortable with these inconsistencies (missing declared envs, config-reading mismatch, and minor rotation bugs), ask the author for a corrected release or run the skill in an isolated environment and review logs/output before using it with real credentials.

Type: OpenClaw Skill Name: tavily-plus Version: 1.0.0 The tavily-plus skill provides an enhanced search interface for the Tavily API, featuring automated query decomposition, API key rotation, and local report generation. The implementation in `scripts/smart-search.js` aligns with the documentation in `SKILL.md`, using standard Node.js modules to perform web requests and write markdown files to a local workspace directory. No evidence of data exfiltration, malicious execution, or prompt injection was found.