tavily

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's scripts (scripts/tavily.sh) call the Tavily API (https://api.tavily.com) to perform web searches and the extract flow explicitly requests and returns raw_content/.content from search results (include_raw_content: true), meaning the agent will ingest and act on untrusted public web content as part of its workflow.