audio-transcription
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a shared utility script,
_postplus_shared/00-core/shared-runtime/scripts/download_videos_from_manifest_with_ytdlp.mjs, which spawnspython3to execute theyt_dlpmodule for downloading media content from external manifests. - [EXTERNAL_DOWNLOADS]: Fetches audio and video files from remote sources and makes periodic network requests to hosted transcription endpoints (e.g.,
transcription-whisper) to retrieve processing results. - [CREDENTIALS_UNSAFE]: Accesses the user's local platform configuration file (e.g., at
~/.config/postplus/config.json) to retrieve session tokens for authenticating requests to the hosted Whisper models, which is a standard procedure for tools within this vendor's ecosystem.
Audit Metadata