ctf-similar-search
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses a legitimate external service (Tavily API) for search and extraction. All API requests are directed to official
api.tavily.comendpoints. - [SAFE]: Secret management follows industry standards by instructing the user to set the
TAVILY_API_KEYvia an environment variable rather than hardcoding credentials. - [SAFE]: Command execution is limited to a controlled Python wrapper script (
search.py) triggered via a shell script. The implementation includes specific logic (word limits and pattern matching) to ensure query precision. - [SAFE]: The skill requests standard permissions (
allowed-tools: Bash Read Write Glob Grep Skill) consistent with its function to install dependencies and execute search scripts.
Audit Metadata