tavily-web
Warn
Audited by Socket on Aug 12, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the claimed purpose is plausible, but the actual install path and trust model are not well aligned with an official Tavily integration. The main risks are third-party skill installation from a personal repo, unclear credential/data routing, and high prompt-injection exposure from arbitrary web content.
Confidence: 86%Severity: 74%
Audit Metadata