audio-transcriber
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/transcribe.pyexecutes external command-line toolsclaudeandgh copilotusingsubprocess.run. These calls are used to process the transcription text into structured documentation and are an intended part of the skill's functionality. Additionally, the script automatically attempts to install missing dependencies (rich,tqdm) usingpipat runtime if they are not detected. - [EXTERNAL_DOWNLOADS]: The
scripts/install-requirements.shscript installs necessary Python dependencies viapipand downloads a Whisper transcription model from a well-known registry (HuggingFace) during the initialization process. It also facilitates the installation of system utilities likeffmpegvia Homebrew on macOS. - [PROMPT_INJECTION]: The skill processes untrusted content from audio files and includes it in prompts sent to LLMs, creating a surface for indirect prompt injection.
- Ingestion points: Transcribed text from user-provided audio files is captured in
scripts/transcribe.pyand interpolated into prompt templates. - Boundary markers: The script uses a simple triple-dash (
---) separator as a delimiter between the system instructions and the untrusted transcription data. - Capability inventory: The skill possesses the capability to invoke external CLI tools (
claude,gh) and write Markdown files to the local file system. - Sanitization: No specific input sanitization, filtering, or escaping is applied to the transcribed text before it is embedded into the LLM prompt.
Audit Metadata