tavily-hikari-crawl

Warn

Audited by Socket on Jul 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose is plausible, but the actual footprint relies on an unverified `tvly-hikari` CLI and routes crawl activity through a third-party Hikari proxy on non-official domains instead of Tavily's documented official CLI/API. That combination makes the skill's install trust and data flow integrity weaker than expected for a normal Tavily crawl helper.

Confidence: 87%Severity: 79%
Audit Metadata
Analyzed At
Jul 15, 2026, 04:22 PM
Package URL
pkg:socket/skills-sh/IvanLi-CN%2Ftavily-hikari%2Ftavily-hikari-crawl%2F@c6c5c29e5778736a24d250a85bc396971494069f70e69e7fc0ccd2caa6d48889
Security Audit — socket — tavily-hikari-crawl