speech
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill implements a speech recognition pipeline that ingests data from a microphone, which is an untrusted external source.
- Ingestion points: The
speech.transcriptionsflow inSKILL.mdcollects text data from voice recognition. - Boundary markers: The provided code snippet does not implement boundary markers or instructions to ignore embedded commands within the transcribed text.
- Capability inventory: The skill interacts with UI components via
showPartialTranscriptand a state management functioncommitTranscript. - Sanitization: There is no evidence of sanitization or validation of the transcribed text before it is processed or displayed.
Audit Metadata