tavily-hikari-map
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
tvly-hikaricommand-line tool to perform site mapping and URL discovery. This is the core functionality described in the documentation and appears benign within the context of a developer utility. - [CREDENTIALS_UNSAFE]: The documentation mentions the requirement for a 'Hikari token' to authenticate with the API facade. However, no actual credentials, tokens, or secrets are hardcoded within the skill file.
- [DATA_EXPOSURE]: The skill allows saving results to a local JSON file (e.g.,
tavily-map.json). This is a standard file-system operation for data persistence and does not involve exfiltration of sensitive user data.
Audit Metadata