tavily-research

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). The URL is a direct link to an install shell script (used with "curl | bash"), a high-risk distribution method for executables/commands that can easily deliver malware and cannot be independently verified from the snippet shown.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). This skill invokes the Tavily CLI “research” workflow, which (per its described purpose) performs runtime web source collection and synthesis, so the agent’s LLM context would likely include outsider-authored free text extracted from public web pages.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's quick-install command fetches and pipes a remote script to the shell (curl -fsSL https://cli.tavily.com/install.sh | bash), meaning the URL https://cli.tavily.com/install.sh is fetched and executed as a required dependency.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.40). The skill recommends running a remote install command ("curl ... | bash") to install the Tavily CLI, which could modify system files or invoke privileged actions even though it doesn't explicitly request sudo or create users.