travily_search_pro

使用 Tavily AI 进行网络搜索、深度研究、内容提取。支持 search、research、extract 三个功能。

This skill appears to implement the advertised Tavily search/research/extract functionality, but take these precautions before installing or using it: - Treat the included .env/TAVILY_API_KEY as sensitive. Do not assume the key is safe to use; remove it from the local copy or replace with your own key. If the key is valid, it may be rate-limited or revoked. - The package metadata did not declare the TAVILY_API_KEY requirement — expect to supply it manually. Confirm you understand where the key will be stored and who can access the repo. - There is no install spec for Python dependencies; the code imports a 'tavily' package and 'requests'. Verify the provenance of the 'tavily' package before installing (pip source, repository, or vendor) to avoid running untrusted third-party code. - Confirm the external endpoints (https://api.tavily.com) are legitimate and acceptable for your environment. Monitor network traffic if you have concerns. - If you need higher assurance, request the upstream source or a signed release, or ask the publisher to fix metadata (declare required env vars) and remove embedded keys. Given these packaging and secret-management issues, review and remediate before use.

Type: OpenClaw Skill Name: travily Version: 1.0.1 The skill bundle provides a legitimate interface for the Tavily AI search and research API. It contains Python scripts (tavily_client.py, tavily_extract.py, tavily_research.py) that use standard libraries like 'requests' to interact with the official api.tavily.com endpoints. The code logic is transparent, aligns with the stated purpose of web searching and content extraction, and handles API keys through a standard .env configuration without any evidence of malicious intent or data exfiltration.