The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill documentation includes an installation command (curl -fsSL https://cli.tavily.com/install.sh | bash) that downloads and executes a shell script directly from the vendor's official domain to install the necessary Tavily CLI tool.
[COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute tvly crawl commands, enabling it to interact with the local operating system and the network to perform its primary function.
[EXTERNAL_DOWNLOADS]: By crawling third-party websites, the skill ingests external data into the agent's context. This represents an indirect prompt injection surface where instructions hidden in crawled web pages could attempt to influence the agent's subsequent actions.
Ingestion points: Untrusted content is retrieved from external URLs passed to the tvly crawl command in SKILL.md.
Boundary markers: The documentation does not specify the use of delimiters or 'ignore' instructions for the crawled data.
Capability inventory: The skill can execute the tvly CLI and write extracted content to the local filesystem using the --output-dir flag as seen in SKILL.md.
Sanitization: No explicit sanitization or filtering of the retrieved web content is mentioned in the skill definition.

tavily-crawl