soniox
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the
soniox-cliutility directly from the author's GitHub repository usinguv tool install git+https://github.com/hoangvantuan/soniox-cli.- [COMMAND_EXECUTION]: The skill uses thesonioxcommand to process audio and video files, manage cloud-stored transcriptions, and generate speech. It also includes an update mechanism that executesuv tool upgradeto maintain the CLI.- [INDIRECT_PROMPT_INJECTION]: The skill transcribes content from external audio/video files and URLs, which serves as an ingestion point for untrusted data that could potentially contain malicious instructions intended to influence the agent's downstream behavior. - Ingestion points:
soniox stt transcribe <file|url> - Boundary markers: None specified in the CLI output examples.
- Capability inventory: CLI execution, file system access (via output flags), and network operations for API communication.
- Sanitization: No specific sanitization or filtering of the transcribed text is described.
Audit Metadata