mmk-plaud-file
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
mmkcommand-line utility to interface with the Plaud service. This is a vendor-provided tool used for legitimate management tasks like listing, renaming, and organizing recordings. - [EXTERNAL_DOWNLOADS]: The
downloadcommand retrieves audio files via pre-signed S3 URLs. These files are streamed directly from cloud storage to the local disk, which is the primary intended function of the skill. - [DATA_EXFILTRATION]: The skill allows writing files to the local filesystem using the
--outflag. This is documented behavior for saving audio recordings and does not involve unauthorized access to sensitive system paths. - [PROMPT_INJECTION]: Indirect surface: The skill processes AI-generated transcripts and summaries (
mmk plaud file transcript,mmk plaud file summary). While these ingest external data into the agent's context, the skill does not possess high-privilege capabilities that would be easily exploitable via indirect injection.
Audit Metadata