transcript-fixer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow reads and processes user-provided transcript files via command-line arguments to correct ASR errors.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill content includes setup instructions using curl and powershell to download and execute remote installation scripts (install.sh, install.ps1) from astral.sh at runtime.