skills/immamdouhaboammar/antigravity-superpowers/agency-voice-ai-integration-engineer/Gen Agent Trust Hub
agency-voice-ai-integration-engineer
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill creates an indirect prompt injection surface by processing external, untrusted audio data and transforming it into text for downstream LLM consumers (e.g., summarization agents).
- Ingestion points: Audio files in various formats (wav, mp3, mp4, etc.) processed in
SKILL.mdthrough functions likevalidate_audio_fileandtranscribe_chunk. - Boundary markers: The instructions do not define boundary markers or explicit prompts to ignore embedded instructions within the generated transcript segments.
- Capability inventory: The skill utilizes shell command execution via
subprocess(ffmpeg,ffprobe) and network operations viahttpxto deliver results to external CMS endpoints. - Sanitization: The provided
normalize_transcriptfunction focuses on formatting and noise reduction rather than filtering or escaping potential prompt injection content. - [COMMAND_EXECUTION]: The skill uses the
subprocessmodule to executeffmpegandffprobefor audio validation and preprocessing. This is standard functionality for an audio engineering skill and targets user-provided file paths locally. - [EXTERNAL_DOWNLOADS]: The skill references external machine learning models and libraries, including
faster-whisperand Hugging Face'spyannote/speaker-diarization-3.1. These are well-known resources in the AI community and their use is consistent with the skill's stated purpose.
Audit Metadata