Speech-to-Text Transcription
Transcribes audio files into text using Whisper Large V3, supporting multiple formats and output types for seamless integration.
Install this skill
Security score
The Speech-to-Text Transcription skill was audited on Feb 25, 2026 and we found 16 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 77 | const response = await fetch(`${endpoint}/audio/transcriptions`, { |
Template literal with variable interpolation in command context
| 127 | const response = await fetch(`${endpoint}/audio/transcriptions`, { |
Template literal with variable interpolation in command context
| 171 | throw new Error(`Audio file not found: ${audioPath}`); |
Template literal with variable interpolation in command context
| 178 | throw new Error(`File too large (${stats.size} bytes). Max: ${maxSize} bytes`); |
Template literal with variable interpolation in command context
| 190 | const response = await fetch(`${endpoint}/audio/transcriptions`, { |
Template literal with variable interpolation in command context
| 197 | throw new Error(`HTTP ${response.status}: ${await response.text()}`); |
Access to .env file
| 20 | - `.env` with `PRIVATE_KEY`, `RPC_URL`, `PROVIDER_ADDRESS` |
Access to .env file
| 62 | const provider = new ethers.JsonRpcProvider(process.env.RPC_URL); |
Access to .env file
| 63 | const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider); |
Access to .env file
| 66 | const providerAddress = process.env.PROVIDER_ADDRESS!; |
Access to .env file
| 112 | const provider = new ethers.JsonRpcProvider(process.env.RPC_URL); |
Access to .env file
| 113 | const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider); |
Access to .env file
| 116 | const providerAddress = process.env.PROVIDER_ADDRESS!; |
Access to .env file
| 162 | const provider = new ethers.JsonRpcProvider(process.env.RPC_URL); |
Access to .env file
| 163 | const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider); |
Access to .env file
| 166 | const providerAddress = process.env.PROVIDER_ADDRESS!; |
Install this skill with one command
/learn @0gfoundation/speech-to-text