local-asr
Fail
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: HIGHINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied audio and video files which may contain adversarial spoken instructions designed to influence the subsequent AI summarization phase.
- Ingestion points: Media files are read by
transcribe.py,server.py, andmoss_mlx.pyfor transcription. - Boundary markers: The skill uses explicit delimiters
<!-- AI-SUMMARY:START -->and<!-- AI-SUMMARY:END -->to wrap generated summaries. - Capability inventory: The skill uses
subprocessto callffmpegandpython3, and performs file writes to.mdand.jsonfiles. - Sanitization: Summarization prompts in
summary.pyinclude instructions to the AI to remain objective and not fabricate information, providing some defense against obedience to audio-based instructions. - [COMMAND_EXECUTION]: The skill frequently uses subprocesses for operational tasks.
scripts/moss_mlx.pyandscripts/align_words.pyinvokeffmpegfor audio normalization and slicing.scripts/auto_transcribe.pyusessubprocess.Popento automatically start the local FastAPI server (scripts/server.py) if it is not already running.scripts/setup.pyandscripts/init_env.pyexecutepython3andcurlfor environment configuration and dependency management.- [EXTERNAL_DOWNLOADS]: The skill downloads AI model weights at runtime.
scripts/setup.pyandscripts/moss_mlx.pyfetch models from ModelScope (modelscope.hub) and Hugging Face. These are well-known, established platforms for AI model distribution.- [DYNAMIC_EXECUTION]: In
scripts/server.py, the skill implements an ONNX export patching mechanism that modifiesfunasr.utils.export_utils._onnxat runtime to ensure compatibility with specific environment configurations. This dynamic modification of imported library logic is used for functional compatibility rather than malicious intent.
Recommendations
- HIGH: Downloads and executes remote code from: http://127.0.0.1:8765, http://127.0.0.1:{port} - DO NOT USE without thorough review
Audit Metadata