Security audit
Security checks for vulnerabilities and agentic risk
This skill is a simple video transcription instruction file with some privacy and scoping caveats but no evidence of malicious behavior.
Before installing, confirm which transcription service the missing script would use and avoid processing sensitive recordings unless you are comfortable sending media to that provider. The skill author should narrow the trigger conditions and add a clear privacy disclosure.
The skill's activation guidance is broad enough to trigger on vague requests like general 'AI related functionality' or 'video operations,' which can cause the agent to invoke this skill in contexts the user did not clearly intend. That increases the chance of unnecessary handling of video content and inadvertent transmission of sensitive media to downstream tooling or services.
The skill instructs use of an external transcription API key but does not warn users that video/audio content may be sent to a third-party service or that credentials are involved. This can lead to privacy, compliance, and data handling issues if users submit sensitive recordings without informed consent or understanding of where the data goes.
