travily_search_pro — 技能工具
v1.0.1使用 Tavily AI 进行网络搜索、深度研究、内容提取。支持 search、research、extract 三个功能。
0· 440·1 当前·1 累计
by 安全扫描
OpenClaw
可疑
medium confidenceThe skill mostly does what its description says (search/research/extract via Tavily) but the package metadata and packaging are inconsistent and it includes a sample API key in the repo — review before installing or using keys.
评估建议
This skill appears to implement the advertised Tavily search/research/extract functionality, but take these precautions before installing or using it:
- Treat the included .env/TAVILY_API_KEY as sensitive. Do not assume the key is safe to use; remove it from the local copy or replace with your own key. If the key is valid, it may be rate-limited or revoked.
- The package metadata did not declare the TAVILY_API_KEY requirement — expect to supply it manually. Confirm you understand where the key w...详细分析 ▾
ℹ 用途与能力
The name/description (Tavily search/research/extract) match the code: scripts call Tavily API endpoints. However the registry metadata claims no required environment variables while both SKILL.md and all scripts expect a TAVILY_API_KEY in a .env file — that mismatch is an incoherence.
✓ 指令范围
SKILL.md instructs storing TAVILY_API_KEY in .env and running the included scripts; the scripts read .env and make HTTPS requests to api.tavily.com. The instructions do not ask the agent to read unrelated files or phone home to unexpected domains — behavior stays within the stated purpose.
ℹ 安装机制
There is no install spec despite Python code that imports external packages: 'tavily' (TavilyClient) and 'requests'. The scripts prompt installing requests but do not declare dependencies or how to obtain the 'tavily' package. This omission is a packaging/operational gap that could lead users to install unknown third‑party packages without guidance.
⚠ 凭证需求
The skill requires a single API credential (TAVILY_API_KEY), which is proportionate to the service. However the metadata omitted this requirement, and the repository includes a .env file containing a TAVILY_API_KEY value (appears to be a dev key). Shipping an API key in the package is risky — if it's valid it could be abused or leak; if it's a placeholder that's less risky but still poor practice. The code reads .env from the repo root and sets environment variables automatically, which amplifies the impact of any embedded secrets.
✓ 持久化与权限
The skill does not request permanent 'always' inclusion, does not modify other skills or system-wide settings, and only writes output files when explicitly asked by the user. Autonomous invocation is allowed by platform default (not flagged by itself).
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/3/16
Initial release of Tavily Search Skill: - 提供三大核心功能：网络搜索（search）、深度研究（research）、URL 内容提取（extract）。 - API Key 配置简单，支持免费注册获取。 - 支持多参数自定义，包括结果数量、搜索深度、时间范围、模型选择输出格式等。 - 提供命令行工具与详细使用示例，便于快速上手。
● 无害
安装命令 点击复制
官方npx clawhub@latest install travily
镜像加速npx clawhub@latest install travily --registry https://cn.clawhub-mirror.com
技能文档
使用 Tavily 的 LLM 优化 API 进行网络搜索、深度研究和内容提取。
配置
API Key 保存在 .env 文件中（与 SKILL.md 同目录）:
TAVILY_API_KEY=tvly-your-key-here
获取免费 API Key: https://tavily.com
三个功能
1. Search - 网络搜索
快速搜索，返回相关结果。
python scripts/tavily_client.py "搜索内容"
参数:
| 参数 | 简写 | 默认 | 说明 |
|---|---|---|---|
--max-results | -n | 10 | 结果数量 (1-20) |
--search-depth | -d | advanced | 搜索深度: ultra-fast, fast, basic, advanced |
--time-range | -t | null | 时间: day, week, month, year |
--json | -j | false | 输出 JSON |
2. Research - 深度研究
对主题进行深入研究，返回完整答案和引用来源。（耗时 30-120 秒）
python scripts/tavily_research.py "量子计算发展趋势"
参数:
| 参数 | 简写 | 默认 | 说明 |
|---|---|---|---|
--model | -m | mini | 模型: mini, pro, auto |
--max-results | -n | null | 最大来源数 |
--output | -o | null | 保存到文件 |
--json | -j | false | 输出 JSON |
3. Extract - URL 内容提取
从指定 URL 提取干净的内容。
python scripts/tavily_extract.py "https://example.com"
参数:
| 参数 | 简写 | 默认 | 说明 |
|---|---|---|---|
--extract-depth | -d | basic | 深度: basic, deep |
--output | -o | null | 保存到文件 |
--json | -j | false | 输出 JSON |
示例
# 搜索
python scripts/tavily_client.py "AI 新闻" --max-results 5 --time-range week# 研究（需等待）
python scripts/tavily_research.py "Python vs JavaScript" --model pro --output report.md
# 提取
python scripts/tavily_extract.py "https://github.com" --output content.md
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制