100Critical
This skill attempts to access sensitive credential files, uses deceptive branding, and lacks dependency version pinning, creating significant risks for credential theft and supply chain compromise.
Skill Info
Namezxkane/audio-transcriber/audio-transcribe
Registrygithub
Version759c3c6db646
PURLpkg:github/zxkane/audio-transcriber@759c3c6db646?skill=audio-transcribe
Stars4
Installs10
Source
Install
This skill has been flagged as potentially malicious. Review the findings below before installing.
GitHub
10 installs
Skills.shDocs
npx skills add https://github.com/zxkane/audio-transcriberAssessments (3)
AI Agent Traps ↗Access to known credential file paths detectedcriticalcredential theftAML.T0055AML.T0037LLM02:2025
Access to known credential file paths detected (seen 3 times in this file at lines 29, 146, 166)
100% confidenceline 29
~/.aws/credentials
Unpinned dependency installationlowsupply chainAML.T0010AML.T0019AML.T0058LLM03:2025
The setup script installs dependencies without version pinning (e.g., flash-attn), which could lead to the execution of arbitrary code if the upstream package is compromised.
90% confidenceline 257
flash-attn==2.7.4.post1
Potential brand impersonationmediumsocial engineeringAML.T0052.000LLM09:2025
Skill name or description references a well-known AI brand, which may suggest impersonation.
70% confidence
openai
Missing licenseinfopolicy violation
Skill does not specify a license field. Specifying a license helps users understand usage terms.
100% confidence
Badge
Markdown
[](https://mondoo.com/ai-agent-security/skills/github/zxkane/audio-transcriber/audio-transcribe)HTML
<a href="https://mondoo.com/ai-agent-security/skills/github/zxkane/audio-transcriber/audio-transcribe"><img src="https://mondoo.com/ai-agent-security/api/badge/github/zxkane/audio-transcriber/audio-transcribe.svg" alt="Mondoo Skill Check" /></a>Image URL
https://mondoo.com/ai-agent-security/api/badge/github/zxkane/audio-transcriber/audio-transcribe.svgSecure your AI agents
Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.
- Continuous scanning of skills across all registries
- Policy enforcement before skills reach your agents
- Integration with your existing security workflow