openai-whisper-api
Pass
Audited by Gen Agent Trust Hub on May 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/transcribe.shexecutes system commands to perform its tasks. - Evidence: The script invokes
curlfor API communication andnode -eto execute an inline JavaScript block that processes the transcription data. - [EXTERNAL_DOWNLOADS]: The skill performs network requests to external endpoints.
- Evidence: It sends audio files and the
OPENAI_API_KEYto the OpenAI Transcriptions API. The default destination isapi.openai.com, which is a well-known service. - [PROMPT_INJECTION]: The skill acts as an ingestion point for external data that could contain malicious instructions (Indirect Prompt Injection surface).
- Ingestion points: Audio files provided by the user are processed and converted to text via
scripts/transcribe.sh. - Boundary markers: Absent; the script does not wrap the output transcription in delimiters or include instructions for the agent to ignore embedded content.
- Capability inventory: The skill possesses file write capabilities and network access via the
transcribe.shscript. - Sanitization: No sanitization or filtering is performed on the text generated from the audio input.
Audit Metadata