tavily-search
Warn
Audited by Socket on Sep 21, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill's purpose and capabilities largely align, and Tavily credential/data flow appears to target official Tavily services. However, the referenced plugin/source links do not match the currently documented official OpenClaw package, so users could install or trust a third-party implementation that receives the Tavily API key. No confirmed exfiltration, pre-execution, or malicious payload is present in the provided skill text.
Confidence: 88%Severity: 58%
Audit Metadata