voice-ai-integration-engineer
“Expert in building end-to-end speech transcription pipelines using Whisper-style models and cloud ASR services — from raw audio ingestion through preprocessing, transcript cleanup, subtitle generation, speaker diarization, and structured downstream integration into apps, APIs, and CMS platforms.”
aipkg.jsonLICENSE.txtREADME.mdvoice-ai-integration-engineer.md- 01OH1Unvalidated Output Injection85%HIGH
voice-ai-integration-engineer.md:176
detailhide
Model output is used without validation or sanitization. Unvalidated output injected into downstream contexts (SQL, shell, HTML) enables injection attacks and arbitrary code execution.
"-af", "loudnorm=I=-16:TP=-1.5:LRA=11", # EBU R128 loudness normalization output_path ] subprocess.run(cmd, check=True, capture_output=True) return output_pathfix Validate and sanitize all model output before using it in downstream contexts. Use parameterized queries for SQL, shell quoting for commands, and HTML encoding for web output.
- 02OH1Unvalidated Output Injection85%HIGH
voice-ai-integration-engineer.md:192
detailhide
Model output is used without validation or sanitization. Unvalidated output injected into downstream contexts (SQL, shell, HTML) enables injection attacks and arbitrary code execution.
overlap: overlap window in seconds (default 30s) """ import math, os result = subprocess.run([ "ffprobe", "-v", "quiet", "-show_entries", "format=duration", "-of", "default=noprint_wrappers=1:nokey=1", input_path ], capture_output=True, text=True, check=True)fix Validate and sanitize all model output before using it in downstream contexts. Use parameterized queries for SQL, shell quoting for commands, and HTML encoding for web output.