Security audit
Transcribe Media
Security checks across malware telemetry and agentic risk
Overview
The skill is a disclosed media-transcription helper that sends media to an external ASR service only after user approval.
Install only if you are comfortable sending approved media files, filenames, content type, and size to the VoiceFlow/AudioFlow transcription service. Review each approval prompt carefully, especially remote ASR upload and yt-dlp download prompts.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
56/56 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.