Manifest
    by Manifold
    Back to Results
    2026.9.6

    @openclaw/tavily-plugin

    OpenClaw Tavily plugin

    code-plugin
    Rank#2003
    openclawclawhub88Last scanned Sep 28, 2026, 08:03 PMhttps://github.com/openclaw/openclaw
    Created
    10 months ago
    Last commit
    19 hours ago
    Latest release
    v2026.9.66 days ago

    Ecosystem

    1 related extension

    Security Findings

    4

    Name shared with another plugin

    SuspiciousEcosystem

    Shares the normalized name 'tavily' with claudeplugins/tavily-ai/tavily (lineage trust 94), the cluster's top-ranked entry; 2 plugins share it. Informational — does not affect the trust score.

    pull_request_target with secrets

    MaliciousLineage

    [.github/workflows/auto-response.yml] pull_request_target with secrets

    Unpinned dependencies

    SuspiciousLineage

    2 unpinned: @openclaw/ai, @openclaw/session-url-contract

    Workflow makes outbound network call

    SuspiciousLineage

    [.github/workflows/ci.yml] curl -fsS --connect-timeout 2 --max-time 5 -X PUT -H 'X-aws-ec2-metadata-token-ttl-seconds: 60' http://169.254.169.254/l

    Contents

    1 skill bundled by this extension

    1 no risk known

    tavily

    skill

    None known
    skills/tavily9a99a9cd8d38…

    Editions

    3
    • 2026.9.6
      Scanned Sep 28, 2026, 08:03 PMMedium
    • 2026.9.4
      Scanned Sep 11, 2026, 08:03 PMMedium
    • 2026.7.1
      Scanned Aug 4, 2026, 03:33 PMHigh
    @openclaw/tavily-plugin — Manifest