The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill mentions the official Tavily installation script URL (https://cli.tavily.com/install.sh) but includes a strong safety warning against piping it directly to a shell without review. It prefers standard package managers like uv or pip.- [COMMAND_EXECUTION]: The skill provides example commands for the official tvly CLI tool (tvly search, tvly extract, etc.). These are bounded, standard usages of the tool for its intended purpose.- [CREDENTIALS_UNSAFE]: The skill follows security best practices for credential management by explicitly instructing users to use environment variables or secret stores rather than hardcoding keys or placing them in source code/logs.- [INDIRECT_PROMPT_INJECTION]: The skill identifies that data returned from web searches or crawls should be treated as untrusted data and includes a verification protocol requiring users to inspect output and treat external content as potentially malicious instructions.

tavily-cli