tavily-list
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from the public web to generate deduplicated lists and tables.
- Ingestion points: Processes external data from web pages and list roundups retrieved via the
tavily-searchtool. - Boundary markers: The instructions do not define delimiters or explicit "ignore" warnings to prevent the agent from obeying instructions embedded in the external web content.
- Capability inventory: The skill utilizes
Bashfor thetvlytool, performs file writes to the locallists/directory, and can executenpxcommands. - Sanitization: There is no evidence of sanitization or structural validation performed on the external data before it is integrated into the agent's context or written to markdown files.
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for the agent to install missing dependencies from the vendor's repository.
- The instructions direct the agent to run
npx skills add tavily-ai/skillsto retrieve related tools such astavily-search,tavily-entity, andtavily-research. - [COMMAND_EXECUTION]: The skill relies on shell command execution for installation and tool usage.
- The configuration allows the use of the
tvlytool through theBashtool. - The instructions explicitly command the use of
npxfor dynamic package installation.
Audit Metadata