tavily-dynamic-search

The skill's SKILL.md is mostly clear, but carries one notable transparency concern: it references remote script execution without establishing a review boundary, which weakens a reviewer's ability to fully assess what the skill will do at runtime. Instruction/data separation looks reasonable and the skill does not strongly push the agent to treat external content as trusted policy. However, because behavior analysis was not run and the remote execution path introduces uncertainty about downstream effects, this lands at AT_RISK with medium confidence—the scan passed on prompt-injection fronts, but finite testing and the unreviewed remote component mean material risk cannot be ruled out.