whisper-transcription
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION] (SAFE): The skill's main script (
scripts/main.py) uses the Whisper library and the standardclickCLI framework to process files. It does not invoke arbitrary system shells or execute untrusted code. Instructions inSKILL.mdfor installingffmpegare standard system requirements for audio processing.\n- [EXTERNAL_DOWNLOADS] (SAFE): Dependencies listed inscripts/requirements.txt(openai-whisper, torch, ffmpeg-python, click) are well-known and reputable. Whileopenai-whisperdownloads model weights from OpenAI's infrastructure on first use, this is expected behavior for its primary purpose. Under [TRUST-SCOPE-RULE], these downloads from trusted sources (OpenAI, Meta) are considered safe.\n- [DATA_EXFILTRATION] (SAFE): The script processes audio files locally and writes output to the local filesystem. No network requests to unauthorized or suspicious domains were detected in the code.\n- [PROMPT_INJECTION] (SAFE): No evidence of instructions intended to override agent behavior, bypass safety filters, or extract system prompts was found in the documentation or metadata.\n- [DATA_EXPOSURE] (SAFE): No sensitive file paths, credentials, or API keys are accessed or hardcoded within the skill files.
Audit Metadata