transcribe
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
uvxto download and run themlx-whisperandopenai-whisperpackages from PyPI. It also downloads transcription models (approximately 1.5 GB) from public repositories during the first execution. - [COMMAND_EXECUTION]: The skill executes shell commands via Bash to perform audio conversion using
ffmpegand transcription usinguvx. It usesmktempto create temporary directories for output. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted audio and video files provided by the user or downloaded from external sources. The resulting transcript is delivered back to the agent's context. While the transcript could contain malicious instructions (spoken content designed to manipulate the AI), the skill itself does not have elevated privileges that would make this uniquely dangerous beyond standard LLM interaction risks.
- Ingestion points: Audio/video files processed by
mlx-whisperoropenai-whisper(SKILL.md). - Boundary markers: None explicitly defined for the resulting transcript text.
- Capability inventory: File read/write, shell command execution via Bash.
- Sanitization: None specified for the text generated from audio.
Audit Metadata