ai-video-calls-tavus
Warn
Audited by Socket on Jul 2, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's purpose is plausible, but its actual data flow is an intermediary proxy pattern rather than direct Tavus API use. Reading raw Gooseworks credentials from disk and routing requests through Gooseworks are proportionate to Gooseworks' gateway product, yet they increase trust and data exposure compared with a direct Tavus integration.
Confidence: 100%Severity: 60%
Audit Metadata