tavily-research-pro

• Analyzed: May 11, 2026, 6:02 AM
• Findings: 1
• Version: 1.1.1
• Hash: bfd0388833a0a525fc46f45b4d7df92f7380fd3cfb9466afcfab985b95f27841
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is a legitimate implementation of the Tavily API for web search, content extraction, and sentiment analysis. All network communication is restricted to the official 'api.tavily.com' endpoint, and the TAVILY_API_KEY is handled securely via local environment variables as documented. The scripts (search.mjs, extract.mjs, report.mjs, sentiment.mjs) contain no obfuscation, malicious execution patterns, or data exfiltration logic.