qwen-asr

SUSPICIOUS. The skill’s capabilities mostly match local ASR transcription, but install and data-flow trust are only partially coherent: it relies on unseen startup/dependency files and routes model downloads through a third-party Hugging Face mirror. No clear credential harvesting or overt exfiltration is shown, so this is not malicious, but the supply-chain and remote-fetch design raise medium risk.

No clear malware or intentional data theft is present. The main security concern is blind SSRF through the unvalidated audio_url, with additional exposure from unrestricted input sizes and verbose error responses. Restrict URL destinations and schemes, impose request and download limits, and avoid exposing detailed errors to clients.