byted-voice-to-text
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/ensure_ffmpeg.pyexecutes system-level commands to manage the installation of dependencies likeffmpegandffprobeusing platform-specific package managers. - [PRIVILEGE_ESCALATION]:
scripts/ensure_ffmpeg.pyutilizessudoon Linux systems to acquire the necessary administrative permissions to install system packages and update repositories. - [INDIRECT_PROMPT_INJECTION]: The skill instructions in
SKILL.mddirect the agent to treat transcribed audio text as direct user messages. This creates a vulnerability surface where malicious instructions embedded in the audio content could influence the agent's behavior. - Ingestion points: Transcribed text output generated by
asr_flash.pyandasr_standard.py. - Boundary markers: Absent; instructions explicitly state to treat the output as a user message and respond directly.
- Capability inventory: The skill has access to shell execution (
ensure_ffmpeg.py), file system access, and network requests via therequestslibrary. - Sanitization: The skill does not perform any validation or sanitization on the transcribed text before presenting it to the agent.
- [EXTERNAL_DOWNLOADS]: During dependency setup,
scripts/ensure_ffmpeg.pydownloads repository configuration files from RPM Fusion (mirrors.rpmfusion.org) to facilitate installation on RHEL-based operating systems.
Audit Metadata