tavily-dynamic-search
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions and examples demonstrate the use of the
Bashtool to execute thetvlyCLI for search and extraction, alongsidepython3andjqfor filtering JSON data locally. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from the public web via search results, creating a potential surface for indirect prompt injection. The skill provides strategies to mitigate this by filtering data locally before returning it to the agent's context.
- Ingestion points: Data retrieved via
tvly searchandtvly extractcommands (found inSKILL.md). - Boundary markers: The skill instructs the agent to return only necessary evidence, though it does not provide explicit prompt delimiters in the code snippets.
- Capability inventory: The skill utilizes file writing (via CLI
-oflag) and reading (via PythonPath.read_text()), as well as general shell execution via the allowedBashtools. - Sanitization: Python snippets included in the skill show field-specific extraction (e.g.,
title,url) and string slicing (e.g.,[:300],[:1200]) to limit the ingestion of raw, untrusted content.
Audit Metadata