openai-whisper
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
whispercommand-line utility and a local shell script{baseDir}/scripts/transcribe.shto process audio files and generate transcripts. - [EXTERNAL_DOWNLOADS]: Downloads Whisper transcription models from official OpenAI resources to the local
~/.cache/whisperdirectory upon first execution of the local CLI mode. - [SAFE]: Utilizes trusted OpenAI API endpoints (
api.openai.com) for cloud-based transcription tasks. - [SAFE]: Provides clear instructions for secure API key management using environment variables or configuration placeholders, avoiding hardcoded secrets.
Audit Metadata