whisper
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references standard machine learning libraries such as
openai-whisper,transformers, andtorch. These packages are maintained by trusted organizations. - [COMMAND_EXECUTION]: Instructions are provided for installing
ffmpegvia system package managers and for using thewhisperCLI. These are standard operations for the tool's functionality. - [INDIRECT_PROMPT_INJECTION]: The skill processes audio data into text, representing a data ingestion surface.
- Ingestion points: Audio files are ingested via
model.transcribe()inSKILL.mdandreferences/languages.md. - Boundary markers: Absent; there are no instructions to disregard potential commands within the audio.
- Capability inventory: Examples include writing output to the file system using
open().write()inSKILL.md. - Sanitization: Absent; the skill does not perform validation or filtering on the transcribed content.
Audit Metadata