inworld
Warn
Audited by Socket on Sep 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core TTS behavior is coherent and mostly benign for a Pixazo gateway skill, but it routes credentials and content through Pixazo instead of Inworld directly, persists the API key locally, and includes an unnecessary transitive skill-install instruction with wildcard scope. Main risk is gateway trust and transitive trust, not confirmed malware.
Confidence: 89%Severity: 54%
Audit Metadata