tavily-hikari-research

Warn

Audited by Socket on Jul 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s purpose is Tavily research, but it routes requests through a Hikari intermediary that retains downstream token context in audit logs. That indirect data flow is disproportionate to a normal direct API integration, and the wrapper CLI provenance is not established in the provided text.

Confidence: 82%Severity: 66%
Audit Metadata
Analyzed At
Jul 15, 2026, 04:22 PM
Package URL
pkg:socket/skills-sh/IvanLi-CN%2Ftavily-hikari%2Ftavily-hikari-research%2F@33380bed4880bb3f1aeaddf90839fd71c2563bf6bb3163d50145735fd0169324
Security Audit — socket — tavily-hikari-research