speech-diarizer
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted media files to generate transcripts. Malicious instructions contained within the transcribed speech are written to the output markdown file, creating a surface for downstream agents to be influenced by the transcript content.
- Ingestion points: Local audio/video files processed by
whisperxinscripts/diarize.py. - Boundary markers: Output is formatted as a Markdown file with speaker labels and timestamps.
- Capability inventory: Local file system read/write, network access for model retrieval, and use of
ffmpeganduv. - Sanitization: No filtering or escaping is applied to the transcribed text before it is saved.
- [EXTERNAL_DOWNLOADS]: Fetches transcription and diarization models from Hugging Face's official repositories during initialization.
- [COMMAND_EXECUTION]: Relies on
ffmpegbeing available in the system PATH for audio processing functionality.
Audit Metadata