Web search via Tavily API (alternative to Brave). Use when the user asks to search the web / look up sources / find links and Brave web_search is unavailable... The skill is a straightforward Tavily web-search wrapper th
Security
High Risk
Quality
Watch · 67
Install
manual only
Audit version
audit-standard-v2
Source metrics come from upstream registries/repositories. Platform metrics come from user actions on SkillTrust and are protected by dedupe/rate-limit anti-abuse rules.
Web search via Tavily API (alternative to Brave). Use when the user asks to search the web / look up sources / find links and Brave web_search is unavailable... The skill is a straightforward Tavily web-search wrapper that matches its stated purpose, but it silently requires a TAVILY_API_KEY (and reads ~/.openclaw/.env) while the registry metadata does not declare this credential and the package has no homepage/source — this mismatch and lack of provenance merit caution. This script appears to do exactly what it says — call Tavily's search API and return results — but there are a few caution points: (1) the registry metadata did not declare the required TAVILY_API_KEY; you will need to provide that key (via env var or ~/.openclaw/.env). (2) There is no homepage or source provenance listed; if you don't already trust api.tavily.com or the package owner, verify who operates Tavily and whether you want to share queries and an API key with that service. (3) Prefer exporting TAVILY_API_KEY in a restricted environment variable rather than storing other secrets in ~/.openclaw/.env; consider creating a dedicated API key with limited scope. (4) If you have security concerns, review the script (it's small and readable) and consider running it in an isolated environment before giving it access to a production agent.
• Add explicit When to Use / Guidelines sections.
• Provide at least one concrete input-output example.
• Publish versioned changelog and update cadence.
• Document compatibility and breaking-change policy.
• Expand capability limits and boundary conditions.
Is this a security certification?
No. SkillTrust audit is advisory and should be combined with your own review controls.
Can I install directly from this page?
No one-click install is provided. Use command guidance and run in your controlled environment.
首次发布:Tavily 驱动的 OpenClaw 网页搜索 skill,支持 brave-like 结构输出与 md 输出。
Official source did not expose a direct install command.
Open official docsInstall method: instruction-only
Quick install
Quick preflight
Read source docs and verify prerequisites manually.Preflight checks
Post-install signal
Installed successfully? Send an activation signal to improve ranking quality over time.
Audit score 60 / 100. Risk guidance is advisory only; review evidence before install.
• Add troubleshooting and FAQ for common failures.
• Improve discoverability through verified source channels.
• Publish usage examples to increase activation quality.
• Reduce shell/file/network scope and document least privilege.
• Expose explicit provenance, dependency pinning, and security notes.
• Provide structured install + rollback steps for each supported agent.
• Mark official/verified status and keep metadata timestamps fresh.
Updated recently within the last 45 days.
Audit guidance: 60 / 100 · high
Scores with similar values can still differ in confidence; use evidence and risk lines below for final install judgment.
Risk 60 · Δ +0 · Findings 5
Apr 3, 2026 · auto
Latest high risk result from audit-standard-v2.