tavily-search

• Analyzed: May 11, 2026, 5:47 AM
• Findings: 1
• Version: 1.0.0
• Hash: 7d335652ec7796594c190226263e597a69ad63b118e480cc2aecce62ffe5aabd
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a legitimate and well-structured implementation for the Tavily Search API. The scripts (search.mjs and extract.mjs) perform standard HTTP POST requests to official Tavily endpoints (api.tavily.com) using environment variables for authentication, with no evidence of malicious execution, data exfiltration, or prompt injection.