inworld

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core TTS behavior is coherent and mostly benign for a Pixazo gateway skill, but it routes credentials and content through Pixazo instead of Inworld directly, persists the API key locally, and includes an unnecessary transitive skill-install instruction with wildcard scope. Main risk is gateway trust and transitive trust, not confirmed malware.

Confidence: 89%Severity: 54%
Audit Metadata
Analyzed At
Sep 22, 2026, 09:03 PM
Package URL
pkg:socket/skills-sh/pixazo-ai%2Fskills%2Finworld%2F@9836cfbbdf2829d0b68a07dc380d2b17741e9cb54cf182073d5e9edb216e066e