Security audit
SenseAudio-ASR
Security checks across malware telemetry and agentic risk
Overview
This SenseAudio ASR skill is an instruction-only integration that uses a disclosed API key to send selected audio to SenseAudio, with no hidden code or persistence found.
Install only if you are comfortable giving the agent access to a SenseAudio API key and sending selected recordings, transcripts, and record queries to SenseAudio. Use authorized audio only, keep the API key in the environment variable, and avoid logging or sharing returned audio URLs and operational identifiers.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.