tavily-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's main workflow (SKILL.md) and scripts/tavily_search.py show it POSTs queries to the Tavily web-search API (https://api.tavily.com/search) and ingests titles/urls/snippets/content and optional "answer" from public web results, so untrusted third‑party content is read and can materially influence agent decisions.