audio-to-subtitles
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill manages sensitive API keys for Cloudflare, Volcengine, and MiniMax through environment variables and local configuration files, which is a standard and safe approach for CLI utilities.
- [SAFE]: Network communication is exclusively directed at well-known and reputable services: Cloudflare R2 for media storage, Volcengine for speech-to-text, and MiniMax for text-to-speech.
- [SAFE]: Output file generation includes robust sanitization of filenames to prevent directory traversal or filesystem errors, using dedicated sanitization functions for both local storage and remote object keys.
- [SAFE]: Analysis of the source code and documentation found no evidence of prompt injection, obfuscation, unauthorized data exfiltration, or persistence mechanisms.
Audit Metadata