ai-video-calls-tavus

Warn

Audited by Socket on Jul 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's purpose is plausible, but its actual data flow is an intermediary proxy pattern rather than direct Tavus API use. Reading raw Gooseworks credentials from disk and routing requests through Gooseworks are proportionate to Gooseworks' gateway product, yet they increase trust and data exposure compared with a direct Tavus integration.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jul 2, 2026, 06:18 AM
Package URL
pkg:socket/skills-sh/athina-ai%2Fgoose-skills%2Fai-video-calls-tavus%2F@9bc3788bc67eae5543fa1a1f90d03f2b7f462f1ab19ae43aac388dcc46f4c43f
Security Audit — socket — ai-video-calls-tavus