tavily-best-practices
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill functions exclusively as a developer reference for the Tavily API. It contains no executable instructions for the agent that could lead to privilege escalation or unauthorized access.
- [SAFE]: Dependency installation instructions reference official, well-known packages (
tavily-pythonand@tavily/core) from standard registries (PyPI and NPM). - [SAFE]: Recommended configuration for API keys uses standard environment variables and local settings files, which is a recognized best practice for sensitive data management.
- [SAFE]: No evidence of prompt injection, obfuscation, or data exfiltration was detected. All network communication described is part of the intended functionality of the Tavily SDKs.
Audit Metadata