youtube-channels
Pass
Audited by Gen Agent Trust Hub on May 3, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a local script
scripts/tapi-auth.jsto handle account registration, email verification, and API key management. - [SAFE]: The authentication script modifies shell configuration files (including
.bashrc,.zshenv,.profile, and PowerShell profiles) to persist theTRANSCRIPT_API_KEYenvironment variable. This is an intended setup function to ensure the API key is accessible to the agent and the CLI. - [SAFE]: The script also manages agent-specific settings by updating configuration files such as
~/.openclaw/openclaw.jsonor~/.clawdbot/moltbot.jsonto store the API key and enable the skill. - [SAFE]: All network operations are directed to the vendor's legitimate API domain
transcriptapi.com. The script does not use external dependencies, obfuscation, or unauthorized remote code execution patterns.
Audit Metadata