media-transcriber
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/transcribe.pyutilizessubprocess.runto automate local environment management, including the creation of a virtual environment and the installation of required packages via pip. It also executesffprobeto determine media duration. - [COMMAND_EXECUTION]: The script
scripts/transcribe.pyemploysos.execvfor process replacement, allowing the application to restart itself within the initialized virtual environment to ensure dependency availability. - [EXTERNAL_DOWNLOADS]: The skill automatically downloads and installs several Python packages from public registries and retrieves pre-trained model weights from official OpenAI and HuggingFace repositories.
- [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface in
scripts/transcribe.pyduring the optional punctuation restoration step. 1. Ingestion points: Transcribed text from external media files is passed to the Claude API. 2. Boundary markers: The prompt uses instructions like 'The following is a sentence...' but lacks robust structural delimiters to isolate the transcribed content. 3. Capability inventory: The skill has the ability to execute subprocesses and perform network requests. 4. Sanitization: No sanitization is applied to the transcribed text before it is inserted into the prompt template.
Audit Metadata