tavily-remote-mcp

SUSPICIOUS: the skill is internally coherent as a Tavily-access wrapper, but its actual data flow is through a third-party DeepNLP/OneKey gateway rather than official Tavily APIs. That proxy design and credential routing are disproportionate trust assumptions for a Tavily-branded skill, though there is no clear evidence of outright malware or hidden payloads.