transcribe-video

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The Dockerfile (run during the skill's image build at runtime) does a git clone of and then builds/installs code from https://github.com/ggerganov/whisper.cpp.git, which fetches remote source that is compiled and executed inside the container—i.e., runtime-fetching and execution of external code.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill instructs the agent to build and start Docker containers (including setting a persistent restart policy), check/use the Docker daemon and invoke local ffmpeg, which modifies the host system state and can persist or require elevated privileges.