Gladia

Security checks across malware telemetry and agentic risk

Overview

This is a coherent Gladia integration skill, but users should be careful because it can delete transcription data through the connected account.

Install only if you trust Membrane and want an agent to manage Gladia transcription workflows. Connect only the intended Gladia account, review the permissions during connection, and require a clear target summary plus explicit confirmation before any delete action or raw proxy request.

SkillSpector

By NVIDIA

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

Confidence: 92% confidence
Finding: The skill advertises destructive delete actions for transcription data without stating that the agent must obtain explicit user confirmation before executing them. In an agent setting, this raises the risk of accidental or ambiguous data deletion, especially when handling broad requests like cleanup or record management.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal