skills/agentskillexchange/skills/Tavily MCP Server for AI-Powered Web Search and Extraction/Snyk

Tavily MCP Server for AI-Powered Web Search and Extraction

Warn

Audited by Snyk on Jun 30, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.90). The skill is an MCP server that performs real-time web search and page extraction via Tavily’s APIs; at runtime the agent will ingest scraped/free-form page text from public web sources fetched based on user queries, which is outsider-authored content.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Jun 30, 2026, 10:10 AM

Issues

1

Security Audit — snyk — Tavily MCP Server for AI-Powered Web Search and Extraction