tavily — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited tavily (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Web search, content extraction, site crawling, URL discovery, and deep research — powered by the Tavily CLI.
Install the Tavily CLI:
curl -fsSL https://cli.tavily.com/install.sh | bashOn a fresh interactive desktop install, the installer starts tvly init automatically. Otherwise run it after installation:
tvly init
# Prefer to open the sign-in link yourself
tvly init --no-browsertvly init authenticates, detects Claude Code, Codex, and Cursor, installs these skills, and verifies a live search. It reuses an existing credential and is safe to rerun. Skills installed this way are pinned to the CLI release, so run tvly update before tvly init when refreshing them.
tvly search and tvly extract also work without authentication, subject to a keyless rate-limit cap. Use tvly init --skip-auth to keep keyless mode while installing the skills. map, crawl, and research require authentication.
Browser-based OAuth is the preferred interactive sign-in method. --no-browser simply prints the sign-in link instead of opening it automatically; the flow still returns to a localhost callback on the machine running tvly. In remote sessions, make sure that callback is reachable (SSH may require port forwarding). For unattended agents or CI, authenticate beforehand or provide TAVILY_API_KEY securely so the process does not wait for human input.
For other agents, or when you only want to install the skills:
npx skills add https://github.com/tavily-ai/skillsInstall the CLI separately if needed:
uv tool install tavily-cli # or: pip install tavily-cliThen use tvly init --skip-skills for guided authentication and verification, or tvly login when you only need to authenticate.
tvly update --check
tvly update| Skill | Description |
|---|---|
| [tavily-search](skills/tavily-search/SKILL.md) | Search the web with LLM-optimized results. Supports domain filtering, time ranges, and multiple search depths. |
| [tavily-extract](skills/tavily-extract/SKILL.md) | Extract clean markdown/text content from specific URLs. Handles JS-rendered pages. |
| [tavily-crawl](skills/tavily-crawl/SKILL.md) | Crawl websites and extract content from multiple pages. Save as local markdown files. |
| [tavily-map](skills/tavily-map/SKILL.md) | Discover all URLs on a website without extracting content. Faster than crawling. |
| [tavily-research](skills/tavily-research/SKILL.md) | Comprehensive AI-powered research with citations. Multi-source synthesis in 30-120s. |
| [tavily-dynamic-search](skills/tavily-dynamic-search/SKILL.md) | Filter and deduplicate large search or extraction results without flooding agent context. |
| [tavily-cli](skills/tavily-cli/SKILL.md) | Overview skill with workflow guide, install/auth instructions. |
| [tavily-best-practices](skills/tavily-best-practices/SKILL.md) | Reference docs for building production-ready Tavily integrations. |
Start simple, escalate when needed:
tvly search "query" --json)tvly extract "https://..." --json)tvly map "https://..." --json)tvly crawl "https://..." --output-dir ./docs/)tvly research "topic" --model pro)~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.