ASR
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documents usage of the
z-aicommand-line interface for performing audio transcription tasks, including file-based and base64-encoded processing. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted audio data from external files which could contain malicious spoken instructions designed to influence the behavior of an agent processing the transcribed text.
- Ingestion points: Files are read using
fs.readFileSyncin the providedscripts/asr.tsand various examples inSKILL.md(e.g.,transcribeAudio,transcribeDirectory). - Boundary markers: None identified in the prompt templates or code examples.
- Capability inventory: The skill uses
z-ai-web-dev-sdkfor network-based ASR processing andfs.writeFileSyncfor saving results to the local filesystem. - Sanitization: No specific sanitization or filtering of transcribed text is implemented before usage or storage.
Audit Metadata