Security audit

asr-sentence-recognition

Security checks for vulnerabilities and agentic risk

Overview

The skill mostly implements a coherent Tencent Cloud ASR client, but registry metadata omits required credentials and the runtime scripts perform system-level installs and access host paths (e.g., QQBot downloads), so the package asks for more access than the metadata indicates.

This package contains a full Tencent Cloud ASR client implemented as Python scripts; that's consistent with the name. However: (1) the registry metadata omits required credentials — the scripts need TENCENTCLOUD_SECRET_ID and TENCENTCLOUD_SECRET_KEY (and TENCENTCLOUD_APPID for some fast/Flash flows). Don't supply credentials unless you expect the skill to call Tencent Cloud. (2) At runtime the skill may auto-install Python packages (pip) and attempt to install ffmpeg/ffprobe via system package managers (apt/dnf/yum/brew/winget/choco), possibly using sudo; that can modify the host system—run in a controlled environment or sandbox. (3) Some references assume access to host directories (e.g., QQ Bot downloads path); if installed on multi-user or sensitive systems, review those behaviors. (4) The code prevents writing keys into the workspace and warns about group-chat key sharing, but you should still only provide credentials in private and prefer temporary or least-privilege credentials. If you need to proceed: verify the scripts yourself (they are included), run in an isolated container or VM, ensure you are comfortable with package-manager installations, and ask the publisher to correct the registry metadata to list required env vars and to document the auto-install behaviors.

Static analysis

No suspicious patterns detected.