OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail4 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
The skill facilitates website crawling using the Tavily CLI. It includes a setup command that downloads an installation script from the vendor's official domain and processes untrusted content from the web, which creates a surface for indirect prompt injection.
Detected behaviors
No alerts
3 issues
1 finding · Score: 82/100