Skip to main content

add-voice-transcription

Integrates OpenAI's Whisper API for automatic transcription of WhatsApp voice messages, enhancing agent communication efficiency.

Install this skill

or
55/100

Security score

The add-voice-transcription skill was audited on Mar 3, 2026 and we found 11 security issues across 3 threat categories, including 1 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

high line 129

Curl to non-GitHub URL

SourceSKILL.md
1292. Verify key works: `curl -s https://api.openai.com/v1/models -H "Authorization: Bearer $OPENAI_API_KEY" | head -c 200`
medium line 47

Access to .env file

SourceSKILL.md
47- Updates `.env.example` with `OPENAI_API_KEY`
medium line 82

Access to .env file

SourceSKILL.md
82Add to `.env`:
low line 91

Access to .env file

SourceSKILL.md
91mkdir -p data/env && cp .env data/env/env
medium line 94

Access to .env file

SourceSKILL.md
94The container reads environment from `data/env/env`, not `.env` directly.
medium line 120

Access to .env file

SourceSKILL.md
120- `OPENAI_API_KEY not set` — key missing from `.env`
medium line 128

Access to .env file

SourceSKILL.md
1281. Check `OPENAI_API_KEY` is set in `.env` AND synced to `data/env/env`
low line 22

External URL reference

SourceSKILL.md
22If yes, collect it now. If no, direct them to create one at https://platform.openai.com/api-keys.
low line 71

External URL reference

SourceSKILL.md
71> 1. Go to https://platform.openai.com/api-keys
low line 129

External URL reference

SourceSKILL.md
1292. Verify key works: `curl -s https://api.openai.com/v1/models -H "Authorization: Bearer $OPENAI_API_KEY" | head -c 200`
low line 136

External URL reference

SourceSKILL.md
136- Invalid API key — regenerate at https://platform.openai.com/api-keys
Scanned on Mar 3, 2026
View Security Dashboard