The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install standard machine learning libraries, specifically mlx-whisper for Apple Silicon and faster-whisper for other platforms. It also facilitates the download of pre-trained Whisper models from the MLX community and standard registries. These are well-known, legitimate resources within the AI development community.
[COMMAND_EXECUTION]: The skill executes local shell commands to identify hardware architecture (e.g., checking for Apple Silicon), manage Python virtual environments in /tmp, and run the transcription script. These commands are standard for local model execution and environment management.
[DATA_EXFILTRATION]: Both the skill instructions and the provided Python script (transcribe.py) lack network operations or any mechanisms for sending data to remote servers. The skill explicitly emphasizes local processing and only reads from or writes to the local file system.
[PROMPT_INJECTION]: The skill processes untrusted user-supplied audio and video files. While this represents an indirect injection surface, the skill implements file extension filtering and lacks exploitable capabilities (such as arbitrary code execution or network access) that would allow for a successful attack payload to have significant impact.

local-audio-transcriber