openai-whisper
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
openai-whispertool via the Homebrew package manager and downloads model weights from OpenAI's servers to~/.cache/whisperupon initial execution. These actions involve official tools and well-known services. - [PROMPT_INJECTION]: The skill creates an attack surface for indirect prompt injection by processing external audio data that may contain malicious instructions intended for the agent once transcribed.
- Ingestion points:
SKILL.md(audio file paths provided towhispercommand). - Boundary markers: Absent; there are no instructions to delimit or ignore content within the transcribed text.
- Capability inventory:
whisperCLI execution, file system reads (input audio), and file system writes (output transcriptions). - Sanitization: Absent; the transcribed text is not filtered or sanitized before being returned to the agent context.
Audit Metadata