tavily-search

Warn

Audited by Socket on Sep 21, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's purpose and capabilities largely align, and Tavily credential/data flow appears to target official Tavily services. However, the referenced plugin/source links do not match the currently documented official OpenClaw package, so users could install or trust a third-party implementation that receives the Tavily API key. No confirmed exfiltration, pre-execution, or malicious payload is present in the provided skill text.

Confidence: 88%Severity: 58%
Audit Metadata
Analyzed At
Sep 21, 2026, 02:06 AM
Package URL
pkg:socket/skills-sh/framix-team%2Fopenclaw-tavily%2Ftavily-search%2F@b7530e87e4dd7b66654c246885b1e9b566cf055384f2e07152e7545039ea3a52