gemini-stt
Pass
Audited by Gen Agent Trust Hub on Feb 15, 2026
Risk Level: LOW
Full Analysis
- [COMMAND_EXECUTION] (INFO): The script utilizes
subprocess.runto interact with the localgcloudCLI for authentication. - Evidence:
transcribe.pyexecutesgcloud auth print-access-tokenandgcloud config get-value projectto facilitate Vertex AI integration. - Risk Assessment: Safe. Commands are called using argument lists rather than shell strings, preventing command injection.
- [DATA_EXFILTRATION] (SAFE): Network activity is restricted to Google's official Generative AI and Vertex AI domains.
- Evidence:
transcribe.pysends requests togenerativelanguage.googleapis.comandaiplatform.googleapis.com. - [REMOTE_CODE_EXECUTION] (SAFE): No patterns for remote script downloading or execution were found. The skill does not use
eval(),exec(), or unsafe deserialization. - [EXTERNAL_DOWNLOADS] (SAFE): The skill has zero external dependencies and does not perform any runtime package installations.
Audit Metadata