tavily-hikari-research
Warn
Audited by Socket on Jul 15, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s purpose is Tavily research, but it routes requests through a Hikari intermediary that retains downstream token context in audit logs. That indirect data flow is disproportionate to a normal direct API integration, and the wrapper CLI provenance is not established in the provided text.
Confidence: 82%Severity: 66%
Audit Metadata