transform-transcribe-audio-with-transloadit
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npx -y @transloadit/nodeto download and execute the official Transloadit CLI tool. This is standard behavior for accessing the vendor's services and is performed via the public NPM registry. - [COMMAND_EXECUTION]: The skill executes shell commands to invoke the transcription logic. These commands are restricted to managing input and output paths for media files and transcripts.
- [INDIRECT_PROMPT_INJECTION]: The skill processes local audio and video files which could potentially contain malicious speech instructions. However, the skill acts as a transformer producing text files, and it includes explicit reminders to keep secrets local and not expose them to the environment or browser.
Audit Metadata