speech-captions
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes
ffmpegandffprobeusing thesubprocessmodule to process audio and video files. These calls use argument lists rather than shell strings, following security best practices to prevent command injection. - [EXTERNAL_DOWNLOADS]: During its first run, the skill downloads transcription models from Hugging Face using the
faster-whisperlibrary. Hugging Face is a recognized and well-known service for hosting AI models. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted media files to generate text transcripts, creating a surface for indirect prompt injection if the resulting text is used in subsequent agent prompts without validation. • Ingestion points: Media files provided via the
--inputargument inscripts/transcribe.pyandscripts/detect-language.py. • Boundary markers: None present; the transcribed text is output directly into SRT, WebVTT, or JSON files. • Capability inventory: File system writes for subtitles and transcripts;subprocess.runexecution for media processing. • Sanitization: No specific sanitization or filtering is performed on the transcribed text content.
Audit Metadata