OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn3 providerslatest audit Mar 18, 2026
Independent checks from skills.sh's audit partners.
This skill provides web search capabilities using the Tavily API. While the skill's primary function is legitimate, it inherently creates a surface for indirect prompt injection and relies on network access to a non-whitelisted third-party domain.
Detected behaviors
No alerts
No issues