tavily-hikari-crawl
Warn
Audited by Socket on Jul 15, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated purpose is plausible, but the actual footprint relies on an unverified `tvly-hikari` CLI and routes crawl activity through a third-party Hikari proxy on non-official domains instead of Tavily's documented official CLI/API. That combination makes the skill's install trust and data flow integrity weaker than expected for a normal Tavily crawl helper.
Confidence: 87%Severity: 79%
Audit Metadata