tavus-cvi-interactions
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation references the inclusion of the
@daily-co/daily-jslibrary viaunpkg.comand the use of thedailyPython package. These resources are associated with Daily.co, a well-known WebRTC infrastructure provider that powers the conversation platform. - [INDIRECT_PROMPT_INJECTION]: The protocol described in
SKILL.mdidentifies mechanisms for injecting external data into the agent's conversational context, such asconversation.respondandconversation.append_context. This establishes a potential attack surface where data from external participants could influence agent behavior, which is an inherent property of interactive conversational agents. - Ingestion points: Data channel events processed by the client, such as
conversation.utteranceandconversation.tool_callfound inSKILL.md. - Boundary markers: None identified in the provided documentation examples.
- Capability inventory: Control over replica speech (
echo), turn-taking (interrupt), and conversational state (overwrite_context). - Sanitization: Not addressed in the protocol message examples.
Audit Metadata