xiaoyuzhou-transcribe
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external URLs which could contain hidden instructions within the audio content. \n
- Ingestion points: Data enters the agent context through the
fetch_htmlanddownload_filefunctions inscripts/xiaoyuzhou_transcribe.pywhen processing a user-supplied URL. \n - Boundary markers: The skill does not implement delimiters or instructions to ignore embedded commands for the generated transcript or subtitle output. \n
- Capability inventory: The script has the capability to perform network requests using the
requestslibrary and write files to the local disk as seen inwrite_srtandwrite_txtwithinscripts/xiaoyuzhou_transcribe.py. \n - Sanitization: No sanitization or filtering is performed on the transcribed text produced by the model. \n- [EXTERNAL_DOWNLOADS]: The
download_filefunction inscripts/xiaoyuzhou_transcribe.pyfetches audio files from external URLs derived from the episode page's metadata. \n- [COMMAND_EXECUTION]: The instructions inSKILL.mdrequire the execution of a Python script that performs file system and network operations based on user-provided arguments.
Audit Metadata