asr
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
coli asrto process audio files and checks for environment tools likeffmpegusing shell commands. These operations are essential for the skill's transcription functionality. - [EXTERNAL_DOWNLOADS]: The skill requires the
@marswave/coliNode.js package and suggestsffmpeginstallation. Additionally, thecolitool automatically downloads speech recognition models (~60MB) to the~/.coli/models/directory upon its first run. - [INDIRECT_PROMPT_INJECTION]: The transcription text derived from user-provided audio files is passed back to the AI for a "polish" step. This creates a potential surface where malicious instructions spoken in the audio could target the AI's refinement process.
- Ingestion points: Raw transcription output from the
coli asrtool inSKILL.md. - Boundary markers: The instructions in Step 4 provide guidance to the AI to preserve meaning and speaker intent while fixing formatting, acting as a soft constraint against redirection.
- Capability inventory: The skill has capabilities to execute the
coliCLI and write markdown transcript files to the current directory. - Sanitization: There is no explicit sanitization step for the transcription text before it is processed by the AI for refinement.
Audit Metadata