tavily-crawl

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). The curl|bash installer URL (https://cli.tavily.com/install.sh) is high-risk because it is a direct remote shell script from an untrusted/third-party domain (executes code on download); the other two URLs are benign example domains.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider-authored free text can be ingested when the required runtime workflow crawls arbitrary web pages at user-supplied URLs/domains (public web content) and returns extracted page/chunk text to be fed into the agent/LLM via the Tavily CLI’s crawl output/--instructions chunking path (SKILL step “crawl → research”).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The Quick install command in SKILL.md executes remote code via curl -fsSL https://cli.tavily.com/install.sh | bash to install the required Tavily CLI, so the skill depends on fetching and running that external script.