Zhipu Asr

• Analyzed: May 12, 2026, 4:29 AM
• Findings: 1
• Version: 1.0.2
• Hash: a360d7eec07facd5a92ba871ab39953681eff4ffd730e26e637e0120aaf8ddab
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is a legitimate wrapper for the Zhipu AI Automatic Speech Recognition (ASR) service. The core script, `scripts/speech_to_text.sh`, performs standard audio processing using ffmpeg and transmits data to the official Zhipu AI API endpoint (open.bigmodel.cn). It includes proper input validation for file size and duration, uses secure temporary file handling, and lacks any indicators of data exfiltration, malicious execution, or prompt injection.