audio-to-srt
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
ffmpegvia the Pythonsubprocessmodule inscripts/transcribe_groq.pyfor audio compression and inscripts/resegment.pyfor silence detection. These calls utilize list-based arguments, which is a security best practice that prevents shell injection vulnerabilities. - [EXTERNAL_DOWNLOADS]: The transcription script
scripts/transcribe_groq.pymakes network requests toapi.groq.com. This is a well-known service provider and the communication is essential for the skill's advertised transcription functionality. - [CREDENTIALS_UNSAFE]: The skill manages the Groq API key securely by attempting to load it from the
GROQ_API_KEYenvironment variable or a specific file in the user's home directory (~/.groq_api_key), rather than using hardcoded secrets. - [SAFE]: The skill's architecture is focused and transparent. It includes specific scripts for processing, cleaning, and validating subtitle data, all of which operate locally on user-provided media files and transcription results without exhibiting malicious patterns like obfuscation or persistence.
Audit Metadata