tavily-web

Warn

Audited by Socket on Aug 12, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the claimed purpose is plausible, but the actual install path and trust model are not well aligned with an official Tavily integration. The main risks are third-party skill installation from a personal repo, unclear credential/data routing, and high prompt-injection exposure from arbitrary web content.

Confidence: 86%Severity: 74%
Audit Metadata
Analyzed At
Aug 12, 2026, 04:13 AM
Package URL
pkg:socket/skills-sh/sickn33%2Fagentic-awesome-skills%2Ftavily-web%2F@d7843f5e97fd069af4e8d410a5b08baadb77475748db425453abeeb611e31037
Security Audit — socket — tavily-web