meeting-scribe
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads Whisper models from Hugging Face (
huggingface.co) and specialized speaker diarization models from the Sherpa-ONNX GitHub repository (github.com/k2-fsa/sherpa-onnx). These are recognized sources for AI and speech processing models. - [COMMAND_EXECUTION]: The skill executes shell commands to invoke transcription engines like
whisperkit-cliandwhisper-cli. It also runs provided Python scripts (fw_transcribe.py,fw_diarize.py) within a managed virtual environment to handle audio processing. - [DATA_ACCESS]: The skill reads and writes to a local configuration file at
~/.config/meeting-transcripts/config.jsonand accesses audio files in a user-defined 'drop-zone' folder to perform its primary function. - [REMOTE_CODE_EXECUTION]: While the skill downloads external binary models and installs Python dependencies during its first-run setup, these actions are performed from reputable sources and are required for the local execution of the Whisper transcription engine.
Audit Metadata