deepgram
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external audio data from streams, local files, and remote URLs (e.g.,
https://example.com/meeting.mp3) for transcription. - Ingestion points: Audio data enters the agent context through
audioStreamin the streaming transcription logic and via files or URLs in the pre-recorded transcription logic inSKILL.md. - Boundary markers: The provided code snippets do not include explicit boundary markers or instructions for the agent to ignore embedded commands within the transcribed text.
- Capability inventory: The skill transcribes audio and explicitly suggests feeding the final results into an LLM for response generation.
- Sanitization: No sanitization, escaping, or filtering of the transcribed content is demonstrated before it is passed to downstream processes.
- [EXTERNAL_DOWNLOADS]: The instructions include the installation of official libraries from a well-known service provider.
- Evidence: The skill recommends installing
@deepgram/sdkvia npm anddeepgram-sdkvia pip to interact with Deepgram's transcription services.
Audit Metadata