Security audit
Openai Whisper Andy27725
Security checks across malware telemetry and agentic risk
Overview
This skill is a straightforward local Whisper transcription helper with no evidence of hidden or unrelated behavior.
Install this if you are comfortable with Homebrew installing openai-whisper and its dependencies. Expect model files to be downloaded and cached locally on first use, and avoid transcribing sensitive audio unless you are comfortable processing it with the locally installed Whisper tool.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.