handsfree
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches a speech-to-text model from Hugging Face to enable local keyword detection. This download targets a well-known service and is a required component for the voice-trigger functionality.
- [COMMAND_EXECUTION]: Employs
osascriptto automate macOS UI actions, specifically focusing the terminal application and simulating the 'Return' key to submit voice-transcribed prompts without manual input. - [COMMAND_EXECUTION]: Uses
sqlite3to interact with the local database of the Wispr Flow application (flow.sqlite) to manage transcription snippets, ensuring the 'appendix' trigger word is handled correctly. - [COMMAND_EXECUTION]: Dynamically resolves terminal window and pane identifiers using
cmux identifyandpython3to ensure that dictated text is correctly directed to the active prompt context.
Audit Metadata