openai-whisper-api
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Executes
curlto send audio data to OpenAI's transcription endpoint. All variables in the shell script are properly quoted to prevent command injection.\n- [DATA_EXFILTRATION]: Sends user-specified audio files toapi.openai.comfor processing. As this is a well-known service and the primary purpose of the skill, it is considered safe.\n- [CREDENTIALS_UNSAFE]: Uses theOPENAI_API_KEYenvironment variable for authentication. The documentation correctly advises users to manage this secret through environment variables or local configuration files rather than hardcoding it.
Audit Metadata