transcribe-and-analyze
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- PROMPT_INJECTION (LOW): The
scripts/analyze_transcript.pyscript is vulnerable to indirect prompt injection. It reads transcript content (derived from untrusted media URLs) and interpolates it directly into the LLM prompt. Evidence Chain: 1. Ingestion points: Transcript files generated byscripts/transcribe.pyfrom external URLs. 2. Boundary markers: Absent in the prompt template. 3. Capability inventory: Subprocess execution ofyt-dlpandwhisperkit-cli, and file system write access. 4. Sanitization: No sanitization or escaping is performed on the transcript text. - COMMAND_EXECUTION (LOW): The script
scripts/transcribe.pyusessubprocess.runto callyt-dlpandwhisperkit-cli. While it uses list-based arguments to prevent shell injection, the execution of these binaries is a core capability that could be targeted. - EXTERNAL_DOWNLOADS (LOW): The skill depends on external tools
yt-dlpandwhisperkit-cli. The troubleshooting guide directs users to install these from external sources. - DATA_EXFILTRATION (LOW): Transcript content is transmitted to OpenAI's API for analysis. This is documented and intended behavior but involves the transmission of processed data to an external cloud service.
Audit Metadata