Voice-to-Protocol Transcriber
ReviewAudited by ClawScan on May 10, 2026.
Overview
The skill mostly matches its voice transcription purpose, but it has unclear network/privacy disclosure for speech recognition and insufficiently bounded local file writes.
Before installing, confirm whether speech recognition sends audio or transcripts to any external service, use safe experiment names without path characters, choose a secure output directory, and install only reviewed dependencies.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Users may believe transcription is fully local when some speech recognition may require network access or an external service.
The documentation simultaneously implies network-dependent recognition and claims no external API calls, which is unclear for a voice tool that may capture sensitive lab or clinical information.
Chinese recognition requires good network connection ... | Network Access | No external API calls | Low |
Clarify whether audio or transcripts leave the device, identify any speech-recognition provider, and require explicit user approval before network-based transcription.
A malformed or untrusted experiment name could place generated protocol files in unexpected local locations.
The output filename is derived from experiment_name with only spaces replaced, so path separators or absolute-path syntax could cause files to be written outside the intended save directory.
filename_base = f"{self.experiment_name.replace(' ', '_')}_{timestamp}" ... file_path = self.save_directory / f"{filename_base}.md"Reject path separators and absolute paths in experiment names, use a safe basename, resolve the final path, and enforce that it stays inside the configured output directory.
Sensitive procedure details, observations, or clinical notes may remain on disk after use.
The skill is intended to record experimental or clinical notes and autosave them as persistent local files.
"Clinical experiment operation logging" ... "auto_save_interval": 60, "save_directory": "~/Documents/Experiment-Protocols"
Use an appropriate secure save directory, avoid regulated data unless approved, and define retention or cleanup practices for generated records.
Users must trust whatever package versions pip resolves at install time, and dependency expectations are not fully consistent.
The skill instructs manual installation of unpinned Python dependencies, while the registry has no install spec and the included requirements file does not match the documented package list.
pip install speechrecognition pyaudio pydub python-docx ... pip install -r requirements.txt
Provide a complete install spec or pinned requirements file and review third-party packages before installation.