Tavily Web Seeker

Enhanced Tavily search with intelligent intent recognition, source preferences, critical source validation, and offline report generation.

This skill appears to do what it says (query a Tavily API, respect domain preferences, and optionally save a markdown report), but the registry metadata did not declare the API keys the code actually reads. Before installing: 1) Confirm where your Tavily API keys should be stored (plugins.entries.tavily.config or environment variables) and update the skill metadata so required credentials are explicit. 2) Verify TAVILY_BASE_URL is either unset or set to the official api.tavily.com — do not point it to unknown hosts. 3) Note the script accepts up to 10 API keys and will rotate on 429s; provide only keys you trust and scope them if possible. 4) Be aware the skill will write reports to ~/.openclaw/workspace/reports when export is used; confirm that path is acceptable. 5) If you need higher assurance, request the author to (a) declare required env vars in registry, (b) document where plugin config should store secrets, and (c) provide a signed release or checksum for the script. These steps will resolve the primary incoherence and reduce risk.

Type: OpenClaw Skill Name: tavily-web-seeker Version: 1.1.0 The skill bundle implements an enhanced search interface for the Tavily API, featuring intent recognition, domain filtering, and report generation. The code in scripts/seeker.js follows standard practices for API interaction, including environment-based credential management and basic file I/O for report saving within a designated workspace directory, with no evidence of data exfiltration or malicious execution.