transcribee Security Audit Report
transcribee is an AI agent skill, created by itsfabioroma and published at itsfabioroma/transcribee. ClawSecure audited transcribee across 19 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 21/100 (Critical). The 12 findings concentrate in Data Exfiltration, Command Injection and Permissions Manifest, including Suspicious Pattern: from 'node:child_process' and Suspicious Pattern: from 'node:child_process'. 3 were rated high or critical severity.
Is transcribee safe?
ClawSecure audited transcribee and assigned a security score of 21/100 (Critical), identifying 12 findings across Data Exfiltration and Command Injection. Review the findings below before installing.
What did ClawSecure find in transcribee?
ClawSecure identified 12 findings in transcribee, concentrated in Data Exfiltration, Command Injection and Permissions Manifest. 3 were rated high or critical severity. The most severe include Suspicious Pattern: from 'node:child_process' and Suspicious Pattern: from 'node:child_process'.
How was transcribee audited?
ClawSecure ran transcribee through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 19 files from itsfabioroma/transcribee.
What does a score of 21 mean?
ClawSecure assigned transcribee a security score of 21/100, placing it in the Critical range. This is driven by 12 findings led by Data Exfiltration that should be addressed before use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).
Audit Findings for transcribee
ClawSecure detected 12 security findings in transcribee, spanning Data Exfiltration, Command Injection, Permissions Manifest and Policy Violation.
- critical · Suspicious Pattern: from 'node:child_process'. Command Injection finding detected in
impossibl.test.ts:2. - critical · Suspicious Pattern: from 'node:child_process'. Command Injection finding detected in
impossibl.ts:1. - critical · Suspicious Pattern: from 'node:child_process'. Command Injection finding detected in
index.ts:6. - medium · Missing config.json - agent may not be properly configured. Permissions Manifest finding.
- low · Suspicious Pattern: fs.readFile(. Data Exfiltration finding detected in
atlascloud.ts:102. - low · Suspicious Pattern: fs.readFile(. Data Exfiltration finding detected in
impossibl.ts:197. - low · Suspicious Pattern: fs.readFile(. Data Exfiltration finding detected in
index.ts:232. - low · Suspicious Pattern: fs.readFile(. Data Exfiltration finding detected in
index.ts:607. - low · Suspicious Pattern: fs.writeFile(. Data Exfiltration finding detected in
index.ts:832. - low · Suspicious Pattern: fs.writeFile(. Data Exfiltration finding detected in
index.ts:833. - low · Suspicious Pattern: fs.writeFile(. Data Exfiltration finding detected in
index.ts:837. - info · Missing License Declaration. Policy Violation finding detected in
SKILL.md.
Each finding is expandable in the interactive list below.
3-Layer Audit Protocol
Security Recommendations for transcribee
Audit external network connections
Harden command execution
Add a config.json permissions manifest
Related Security Research
ClawHavoc Explained: The Malware Family Targeting AI Agents→Beyond Static Scans: Why ClawSecure Verifies Agentic Intent→Related AI Agent Security Audits
Scanned on October 3, 2026. transcribee is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.