Manifest
    by Manifold
    Back to Results
    High Risk
    2026.7.1

    @openclaw/tavily-plugin

    OpenClaw Tavily plugin

    code-plugin
    Manifest22
    Lineage52
    Safety100
    Rank#1825
    openclawclawhub3Last scanned Aug 4, 2026, 03:33 PMhttps://github.com/openclaw/openclaw

    Ecosystem

    1 related extension

    Security Findings

    4

    Non-primary copy of an established plugin

    Shares the normalized name 'tavily' with the established primary claudeplugins/tavily-ai/tavily (lineage trust 94); this copy ranks 1825 of 2 in the cluster. -30 trust.

    pull_request_target with secrets

    [.github/workflows/auto-response.yml] pull_request_target with secrets

    Unpinned dependencies

    1 unpinned: @openclaw/ai

    Workflow makes outbound network call

    [.github/workflows/mantis-slack-desktop-smoke.yml] curl -fsS --connect-timeout 5 --max-time 15 https://checkip.amazonaws.com

    Contents

    1 skill bundled by this extension

    1 clean

    tavily

    skill

    100
    Clean
    skills/tavily9a99a9cd8d38…

    Editions

    1
    • 2026.7.1
      Scanned Aug 4, 2026, 03:33 PM22
      High Risk