speech-captions

Pass

Audited by Gen Agent Trust Hub on Aug 31, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill invokes ffmpeg and ffprobe using the subprocess module to process audio and video files. These calls use argument lists rather than shell strings, following security best practices to prevent command injection.
  • [EXTERNAL_DOWNLOADS]: During its first run, the skill downloads transcription models from Hugging Face using the faster-whisper library. Hugging Face is a recognized and well-known service for hosting AI models.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted media files to generate text transcripts, creating a surface for indirect prompt injection if the resulting text is used in subsequent agent prompts without validation. • Ingestion points: Media files provided via the --input argument in scripts/transcribe.py and scripts/detect-language.py. • Boundary markers: None present; the transcribed text is output directly into SRT, WebVTT, or JSON files. • Capability inventory: File system writes for subtitles and transcripts; subprocess.run execution for media processing. • Sanitization: No specific sanitization or filtering is performed on the transcribed text content.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 31, 2026, 05:20 AM
Security Audit — agent-trust-hub — speech-captions