skills/orthogonal-sh/skills/tavus/Socket

tavus

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: The Tavus functionality itself is coherent, but the skill relies on an unverified orth CLI instead of documented direct Tavus API usage. That makes install trust and credential handling disproportionate to an otherwise simple API wrapper.

Confidence: 86%Severity: 80%

Audit Metadata

Analyzed At

Mar 29, 2026, 05:59 PM

Package URL

pkg:socket/skills-sh/orthogonal-sh%2Fskills%2Ftavus%2F@90da9bb14c2fedc8db1fd304c01f9da07953994c