skills/sickn33/agentic-awesome-skills/tavily-web/Socket

tavily-web

Warn

Audited by Socket on Oct 29, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated capability is coherent for a web-research skill, and the prompt-injection boundary is well scoped, but installation relies on transitive trust in a third-party GitHub-published skill that is not from the official Tavily organization. Main risk is supply-chain/trust provenance rather than overt malicious behavior or credential exfiltration.

Confidence: 89%Severity: 56%

Audit Metadata

Analyzed At

Oct 29, 2026, 06:30 PM

Package URL

pkg:socket/skills-sh/sickn33%2Fagentic-awesome-skills%2Ftavily-web%2F@3de8a3ca13c963c83b87e1dac93dda83a789e5b3