Burmese Audio Understanding
Security checks across static analysis, malware telemetry, and agentic risk
Overview
The skill's code, instructions, and declared requirements are consistent with its stated purpose (transcribing Burmese audio via Google Gemini) and do not request unrelated credentials or elevated privileges.
This skill appears to do exactly what it says: upload a local audio file to Google Gemini for transcription. Before installing or running it: ensure you trust the @google/genai package version you'll install, protect the GEMINI_API_KEY (store it securely and grant only necessary permissions), be aware that audio data is transmitted to Google's servers (including any personally identifying content), and revoke the key if it is ever exposed. Also consider running npm installs in an isolated environment (container or VM) and confirm the package.json version matches the published registry artifact if version provenance matters to you.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
No VirusTotal findings
Risk analysis
No visible risk-analysis findings were reported for this release.