Security audit
Security checks for vulnerabilities and agentic risk
This is a coherent local speech-to-text debugging skill, with privacy caveats around audio files and log/proxy captures but no evidence of hidden or unsafe behavior.
Install only if you are debugging a local STT workflow. Use non-sensitive sample audio where possible, be careful with gateway logs or proxy captures because they may contain transcripts and metadata, and remove temporary captures after debugging.
This is a markdown file, so SQP-2 applies to omissions in user-facing documentation. The document instructs users to upload audio files and optionally provide contextual text, but it does not warn that these inputs may contain sensitive personal or confidential information and will be processed by the service.
The skill recommends using a dump proxy or server logs to inspect transcription traffic but does not warn that those requests can contain sensitive audio content, transcripts, filenames, and metadata. In a local STT debugging workflow this is common operational guidance, but without minimization or redaction guidance it can lead to unnecessary exposure of private user data during troubleshooting.
