assemblyai-rate-limits
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions facilitate the ingestion and processing of untrusted external audio content, creating an attack surface for indirect prompt injection if the resulting transcripts contain malicious instructions.\n
- Ingestion points: The
audioUrlparameter used in thetranscribeWithBackoff,queuedTranscribe, andbatchTranscribefunctions inSKILL.md.\n - Boundary markers: Absent; the code snippets and instructions do not include or recommend the use of delimiters or 'ignore' warnings for the transcribed output.\n
- Capability inventory: The implementation utilizes the
assemblyaiSDK to perform network requests to an external transcription service.\n - Sanitization: Absent; the instructions do not provide methods for validating input URLs or filtering the transcription text for potentially harmful content.
Audit Metadata