Tavily Search
Security checks across malware telemetry and agentic risk
Overview
The skill is internally consistent: it requires Node and a single Tavily API key, and the included scripts only call Tavily's API endpoints to perform search and extraction.
This skill appears to be what it says: small Node scripts that call Tavily's API. Before installing, consider whether you trust Tavily (https://tavily.com) because your TAVILY_API_KEY will be sent to api.tavily.com in request bodies. Review your organization's policy about providing third-party API keys. If you want extra assurance, inspect the two included scripts (they are short and readable) and confirm your runtime Node version supports fetch (Node 18+), or run them in a restricted environment. If you do not trust Tavily, do not provide your API key.
SkillSpector
SkillSpector findings are pending for this release.
VirusTotal
66/66 vendors flagged this skill as clean.