transcribe-audio
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The
SKILL.mdfile instructs the agent to execute a shell script (./scripts/transcribe.sh) and usefindto locate audio files. These are expected behaviors for the skill's primary function of processing local audio files. - [EXTERNAL_DOWNLOADS]: The
transcribe.shscript uses a Nix shebang to dynamically load necessary utilities (bash,curl,jq,coreutils) from the official Nixpkgs registry. This is a standard and secure way to manage dependencies. - [CREDENTIALS_SAFE]: The script follows security best practices for credential management by retrieving the API key from the local
pass(Password Store) utility rather than using hardcoded secrets or environment variables.
Audit Metadata