audio-transcribe-cli

v0.1.0 suspicious
4.0
Medium Risk

Local CLI for audio/video transcription using Soniox API — generates SRT subtitles with an HTML viewer, no server required

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package exhibits moderate risk due to its network communication with an external API and missing metadata. While it does not show signs of immediate malicious activity, the lack of repository and author information raises concerns about its legitimacy.

  • Moderate network risk due to API communication
  • Missing repository and author details
Per-check LLM notes
  • Network: The network calls suggest the package is likely communicating with an external API, possibly for transcription services, which is somewhat expected but could indicate potential data transmission risks.
  • Shell: Subprocess calls are used to execute external commands, possibly for audio processing tasks. While this is not inherently suspicious, it could be leveraged for unintended purposes if not properly sanitized.
  • Obfuscation: No obfuscation patterns detected, indicating low risk.
  • Credentials: No credential harvesting patterns detected, indicating low risk.
  • Metadata: The package is suspicious due to the lack of repository and author details, suggesting potential malicious intent.

📦 Package Quality Overall: Low (3.2/10)

○ Low Test Suite 1.0

No test suite detected

  • No test files or test-runner configuration detected
◈ Medium Documentation 5.0

Some documentation present

  • Detailed PyPI description (3831 chars)
○ Low Contributing Guide 4.0

No contributing guide or governance files found

  • Development Status classifier >= Beta
◈ Medium Type Annotations 5.0

Partial type annotation coverage

  • 59 type-annotated function signatures detected in source
○ Low Multiple Contributors 1.0

Could not retrieve contributor data from GitHub

  • GitHub API error: 404

🔬 Heuristic Checks

⚠ Outbound Network Calls score 6.0

Found 4 network call pattern(s)

  • on"} try: resp = httpx.post(f"{endpoint.rstrip('/')}/chat/completions", json=payload, he
  • an error. """ resp = httpx.post( _DEMO_ENDPOINT, headers={ "Refe
  • needed self._client = httpx.Client( headers={"Authorization": f"Bearer {api_key}"},
  • chat/completions" resp = httpx.post( url, headers={"Authorization": f"Bearer {ap
✓ Code Obfuscation

No obfuscation patterns detected

⚠ Shell / Subprocess Execution score 10.0

Found 6 shell execution pattern(s)

  • py", audio_path] result = subprocess.run(cmd, capture_output=True, text=True) if result.returncod
  • h, ] result = subprocess.run(cmd, capture_output=True, text=True, check=True) ret
  • "null", "-"] result = subprocess.run(cmd, capture_output=True, text=True) ends: list[floa
  • utput_path, ] subprocess.run(cmd, capture_output=True, check=True) """context_extractor:
  • ILENCE_MIN_DUR}" result = subprocess.run( ["ffmpeg", "-i", file_path, "-af", af, "-f", "null"
  • audio/video.""" result = subprocess.run( [ "ffmpeg", "-i", file_path,
✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: sun-asterisk.com>

✓ Suspicious Page Links

All external links appear legitimate

⚠ Git Repository History score 3.0

Repository not found (deleted or private)

  • Repository not found (deleted or private)
⚠ Maintainer History score 6.0

3 maintainer concern(s) found

  • Only one version has ever been released — brand new package
  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with audio-transcribe-cli 
Create a mini-application called 'SubtitleMaster' which leverages the 'audio-transcribe-cli' Python package to provide users with a straightforward way to generate subtitles from their audio and video files. This application will serve as both a command-line tool and a simple graphical interface, making it accessible to users of all technical backgrounds.

The core functionality of 'SubtitleMaster' includes:
- Accepting user input for the path to the audio or video file they wish to transcribe.
- Utilizing the 'audio-transcribe-cli' package to process the input file and generate SRT subtitle files.
- Offering an HTML viewer integrated within the application for previewing the generated subtitles.
- Providing options for customizing subtitle styles such as font size, color, and background opacity.
- Allowing users to save the final SRT file and HTML preview directly to their local system.

Additional features to consider adding:
- Support for multiple languages to cater to a global audience.
- A progress bar during the transcription process to keep users informed about the status.
- An option to automatically detect the language of the input audio/video for seamless usage across different regions.
- Integration with cloud storage services like Google Drive or Dropbox for easy sharing and collaboration.

To utilize the 'audio-transcribe-cli' package effectively, your application should follow these steps:
1. Install the package via pip if not already installed.
2. Prompt the user to select the file they want to transcribe.
3. Use the 'audio-transcribe-cli' command-line interface to initiate the transcription process, specifying any necessary parameters such as language detection or customization settings.
4. Once the transcription is complete, display the SRT content in an embedded HTML viewer within your application for user review.
5. Provide options to edit the generated subtitles before saving them.
6. Allow users to export the final version of the SRT file and the HTML preview to their desired location on their device.

By following these guidelines, 'SubtitleMaster' aims to become a go-to tool for anyone looking to quickly and efficiently create subtitles for their multimedia content.

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!