Security audit

Audio Meeting Minutes

Security checks across malware telemetry and agentic risk

Overview

The skill appears to be a legitimate meeting-recording transcription helper, but it needs Review because it asks users to provide cloud speech credentials in chat while handling sensitive recordings.

Install only if you are comfortable with the skill handling meeting audio and transcripts. Prefer environment variables, a secret store, or a local config file for speech-service credentials instead of pasting keys or tokens into chat, and use short-lived, scoped credentials whenever possible.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

Confidence: 83% confidence
Finding: The trigger list includes broad/common terms such as 会议录音, 会议纪要, 录音转文字, and 音频转文字, which could cause accidental invocation during ordinary conversation. In this skill, accidental activation is more concerning because the skill has network, shell, and filesystem permissions and may prompt for credentials or process sensitive meeting recordings.

Ssd 3

Medium

Confidence: 97% confidence
Finding: The skill explicitly instructs users to paste cloud speech-service credentials into chat while acknowledging that chat logs may retain them. Even though it recommends short-lived tokens, collecting secrets through conversational text exposes them to logging, retention, replay, accidental disclosure, and misuse by downstream systems or operators.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.