Agent skill · software engineering · jeremylongshore
assemblyai-install-auth
Configure AssemblyAI keys, regional endpoints, and server-versus-browser authentication safely. Use when installing or authenticating an integration. Trigger with "AssemblyAI auth", "AssemblyAI API key", or "AssemblyAI endpoint setup".
Why this skill is useful
Adds specific installation and configuration steps for the AssemblyAI SDK that the AI wouldn't reliably generate on its own.
What it needs
Requires node, python installed locally. Requires assemblyai account access. About 2k tokens when loaded. Last updated 2026-08-07. 2,604 stars on the source repository.
What this skill does
AssemblyAI Identity and Endpoint Setup Overview Configure AssemblyAI keys, regional endpoints, and server-versus-browser authentication safely. Treat live audio, transcript content, credentials, spend, and destructive state as separately governed boundaries. Prerequisites The target repository or integration path and the requested operator outcome. The AssemblyAI project, environment, region, data classification, and accountable owner. Current first-party documentation plus credentials only for a narrowly approved live check. Current Contract Pre-recorded REST uses the approved US or EU api.assemblyai.com host and the raw project key in the Authorization header. Streaming uses the v3 WebSocket host. Browser and mobile clients receive short-lived, single-use streaming tokens from a trusted backend; they never receive the project key. Authentication For live work, inject ASSEMBLYAIAPIKEY from an approved secret manager and send the raw value only in the AssemblyAI Authorization header to the configured first-party host. Never print, commit, place in a URL, or expose it to an untrusted client. Callback secrets and temporary streaming tokens are separate credentials. Instructions 1. Inventory runtime trust, data class, region, and environment. 2. Pin the official SDK and centralize reviewed endpoint configuration. 3. Separate keys by environment and inject them from the secret manager. 4. Design an authorized, origin-limited token endpoint for untrusted clients. 5. Verify one synthetic pre-recorded request with explicit speechmodels. 6. Record host, key-owner, rotation, token TTL, and redacted results. Tool Discipline Use Read, Glob, and Grep to inspect repository code, configuration, fixtures, and evidence. Use Write and Edit only for approved implementation or documentation changes. Do not call AssemblyAI, upload audio, open a streaming session, mint a token, replay a callback, deploy, rotate a key, or delete a transcript merely because this skill was invoked. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills jeremylongshore/assemblyai-install-auth