web-search-tavily

SUSPICIOUS: the skill's search/research capabilities broadly match its stated purpose, and the Gooseworks login path appears same-org documented. However, the skill is presented as a Tavily integration while routing all requests and bearer credentials through Gooseworks proxy endpoints instead of Tavily's official API, and it reads local credential files directly. This is not confirmed malware, but the intermediary data flow and credential handling make it a medium-risk skill.