tavily-remote-mcp
Warn
Audited by Snyk on Mar 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The SKILL.md and accompanying scripts explicitly call web-facing tools (tavily_search, tavily_extract, tavily_crawl, tavily_map, tavily_research) that fetch/search/crawl arbitrary public URLs and pages and return their content for the agent to read and act on, exposing it to untrusted third-party (user-generated/public web) content that could carry indirect prompt injections.
Audit Metadata