byted-voice-to-text

Pass

Audited by Gen Agent Trust Hub on Sep 21, 2026

Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/ensure_ffmpeg.py executes system-level commands to manage the installation of dependencies like ffmpeg and ffprobe using platform-specific package managers.
  • [PRIVILEGE_ESCALATION]: scripts/ensure_ffmpeg.py utilizes sudo on Linux systems to acquire the necessary administrative permissions to install system packages and update repositories.
  • [INDIRECT_PROMPT_INJECTION]: The skill instructions in SKILL.md direct the agent to treat transcribed audio text as direct user messages. This creates a vulnerability surface where malicious instructions embedded in the audio content could influence the agent's behavior.
  • Ingestion points: Transcribed text output generated by asr_flash.py and asr_standard.py.
  • Boundary markers: Absent; instructions explicitly state to treat the output as a user message and respond directly.
  • Capability inventory: The skill has access to shell execution (ensure_ffmpeg.py), file system access, and network requests via the requests library.
  • Sanitization: The skill does not perform any validation or sanitization on the transcribed text before presenting it to the agent.
  • [EXTERNAL_DOWNLOADS]: During dependency setup, scripts/ensure_ffmpeg.py downloads repository configuration files from RPM Fusion (mirrors.rpmfusion.org) to facilitate installation on RHEL-based operating systems.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 21, 2026, 03:16 PM