ai-video-calls-tavus

Warn

Audited by Socket on Jul 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's purpose is plausible, but its actual data flow is an intermediary proxy pattern rather than direct Tavus API use. Reading raw Gooseworks credentials from disk and routing requests through Gooseworks are proportionate to Gooseworks' gateway product, yet they increase trust and data exposure compared with a direct Tavus integration.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jul 2, 2026, 06:18 AM
Package URL
pkg:socket/skills-sh/athina-ai%2Fgoose-skills%2Fai-video-calls-tavus%2F@9bc3788bc67eae5543fa1a1f90d03f2b7f462f1ab19ae43aac388dcc46f4c43f