OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Aug 12, 2026
Independent checks from skills.sh's audit partners.
This skill provides web search and content extraction capabilities using the Tavily API. It requires the installation of an external package from an unverified GitHub repository and, by its nature of processing web content, presents a surface for indirect prompt injection.
Detected behaviors
1 alert: gptSecurity
1 issue
1 file scanned · No issues
Score: 93/100 · 2 sections analyzed