yichen-asr
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a 'doctor' script (
scripts/asr_doctor.py) that checks for the presence of necessary environment variables (likeSTEP_API_KEYandVOLC_ASR_TOKEN) using boolean checks. It explicitly avoids printing or logging the actual secret values. - [SAFE]: Instructions in
SKILL.mdemphasize user safety and billing transparency, requiring manual confirmation for large tasks and directing users to official console URLs for financial management. - [SAFE]: Command execution is limited to standard Python scripting for routing logic and system readiness checks. The use of
subprocess.runintests/test_contract.pyis a standard practice for unit testing the routing script's output. - [SAFE]: Data processing is focused on local audio and video files, with no evidence of unauthorized network exfiltration or remote code execution. All external references target official documentation or billing portals of well-known service providers.
Audit Metadata