tavily-search

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). This is a direct curl | bash install script hosted on an unverified domain (cli.tavily.com), a high-risk pattern because it fetches and executes remote shell code from an untrusted source.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). This skill performs runtime web search and (optionally) retrieves and includes full page raw content/snippets from public URLs, so outsider-authored free text is fed into the agent’s LLM context via the search→extract/crawl→research pipeline results.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The SKILL's prerequisites include a direct install command that fetches and pipes a remote script to the shell (curl -fsSL https://cli.tavily.com/install.sh | bash), which executes remote code and is required for the skill (Tavily CLI).