skills/hoangvantuan/soniox-cli/soniox/Gen Agent Trust Hub

soniox

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the soniox-cli utility directly from the author's GitHub repository using uv tool install git+https://github.com/hoangvantuan/soniox-cli.- [COMMAND_EXECUTION]: The skill uses the soniox command to process audio and video files, manage cloud-stored transcriptions, and generate speech. It also includes an update mechanism that executes uv tool upgrade to maintain the CLI.- [INDIRECT_PROMPT_INJECTION]: The skill transcribes content from external audio/video files and URLs, which serves as an ingestion point for untrusted data that could potentially contain malicious instructions intended to influence the agent's downstream behavior.
  • Ingestion points: soniox stt transcribe <file|url>
  • Boundary markers: None specified in the CLI output examples.
  • Capability inventory: CLI execution, file system access (via output flags), and network operations for API communication.
  • Sanitization: No specific sanitization or filtering of the transcribed text is described.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 03:02 PM