Security audit
Security checks for vulnerabilities and agentic risk
This skill is a simple guide for sending audio to a disclosed Tailnet Whisper service, but users should treat any uploaded audio as shared with that service.
Install only if you intend to send audio files to this shared Tailnet Whisper server. Avoid confidential, regulated, or consent-sensitive recordings unless you trust the server operator, network path, and retention practices.
The skill instructs agents to send audio data to a remote transcription service over plain HTTP and does not warn about privacy, consent, or data handling. Audio content may contain sensitive personal or business information, and transmitting it to a shared remote host without disclosure increases the risk of unauthorized disclosure and misuse.
The skill directs use of an external network endpoint and encourages uploading raw audio content to it. In context, this is the core function of the skill, but it still creates a real data exfiltration pathway—especially because the endpoint uses HTTP to a remote Tailnet address and the guidance lacks trust, authentication, or sensitivity constraints.
curl -sS http://100.92.116.99:8765/health
No suspicious patterns detected.