audio-transcription

Pass

Audited by Gen Agent Trust Hub on May 12, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes a shared utility script, _postplus_shared/00-core/shared-runtime/scripts/download_videos_from_manifest_with_ytdlp.mjs, which spawns python3 to execute the yt_dlp module for downloading media content from external manifests.
  • [EXTERNAL_DOWNLOADS]: Fetches audio and video files from remote sources and makes periodic network requests to hosted transcription endpoints (e.g., transcription-whisper) to retrieve processing results.
  • [CREDENTIALS_UNSAFE]: Accesses the user's local platform configuration file (e.g., at ~/.config/postplus/config.json) to retrieve session tokens for authenticating requests to the hosted Whisper models, which is a standard procedure for tools within this vendor's ecosystem.
Audit Metadata
Risk Level
SAFE
Analyzed
May 12, 2026, 10:18 AM