edgespeak-transcribe
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of the
edgespeak-clitool. It instructs the agent to run various subcommands such asstatus,login,activate,transcribe, andsegment. These commands are specific to the EdgeSpeak vendor's transcription utility and are used to manage local transcription workflows and licensing. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data in the form of audio and video files provided by the user.
- Ingestion points: Media files are passed to
edgespeak-cli transcribefor processing into text or JSON. - Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions when handling the resulting transcript text.
- Capability inventory: The skill has the capability to execute CLI commands, write files to disk (using the
-oflag), and make network requests to a local gateway (127.0.0.1). - Sanitization: There is no mention of sanitizing or escaping the transcription output before the agent is asked to 'summarize / clean up / translate' the content. This creates a surface where malicious instructions embedded in the audio could potentially influence the agent's behavior during these post-processing steps.
Audit Metadata