Tavily Search

• Analyzed: May 11, 2026, 5:58 AM
• Findings: 1
• Version: 7.0.0
• Hash: ea5f30a3d577aa07540cfe0863eb51502b1146a2e49c3eeb38f6790db3817797
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is a legitimate wrapper for the Tavily Search API. The bash script (scripts/search.sh) safely handles JSON input and communicates only with the official Tavily endpoint (api.tavily.com). The documentation (SKILL.md) provides clear, helpful instructions for the agent without any signs of prompt injection or malicious directives.