whisper-beat-finder
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes Python scripts (
scripts/transcribe.pyandscripts/find-beats.py) designed to be executed by the user. These scripts perform expected file operations (reading audio, writing JSON/Markdown) and use the standardopenai-whisperlibrary for audio processing. - [EXTERNAL_DOWNLOADS]: The skill relies on the
openai-whisperpackage. The model weights (e.g.,medium.en) are downloaded by the Whisper library from official OpenAI repositories upon the first run ofwhisper.load_model(). This is standard behavior for this well-known library. - [DATA_EXPOSURE]: The scripts process local audio files and write transcripts to the local file system. No network exfiltration or unauthorized data access patterns were detected.
- [PRIVILEGE_ESCAlATION]: No commands requiring elevated privileges (sudo, chmod 777, etc.) are present.
Audit Metadata