assemblyai-transcribe
Warn
Audited by Snyk on Mar 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). This skill's transcribe command accepts arbitrary public audio URLs (see SKILL.md example "transcribe "https://..."") and assemblyai.mjs forwards the URL to the AssemblyAI API and returns the resulting transcript/paragraphs/sentences/subtitles to the agent, so untrusted third-party content can be ingested and influence downstream decisions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata