Back to skill
Skillv1.0.0
ClawScan security
Audio Transcribe · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignFeb 16, 2026, 5:36 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill's code and instructions match its stated purpose (local transcription with faster-whisper); it does not request credentials or access unrelated resources.
- Guidance
- This skill appears coherent for local transcription. Before installing: (1) be aware pip install faster-whisper will install third-party code from PyPI and may build native dependencies—review that package if you require strict supply-chain controls; (2) model files are downloaded on first use (network bandwidth, disk space, and cache location like ~/.cache may be used); (3) transcription can require significant RAM/CPU/GPU depending on model size—ensure your system meets the listed VRAM/RAM requirements; (4) the included script only reads the audio file you pass and prints the text (no hidden endpoints or credential access were found), but if you must guarantee full offline operation, pre-download models and verify faster-whisper’s sources before running.
Review Dimensions
- Purpose & Capability
- okName/description (local transcription with faster-whisper) align with included script and SKILL.md. The script only loads a WhisperModel and transcribes a provided audio file.
- Instruction Scope
- okRuntime instructions and the script operate only on the provided audio path and model downloads; there are no references to unrelated files, environment variables, or external endpoints in the skill code itself.
- Install Mechanism
- noteNo install spec in the registry; SKILL.md asks the user to pip install faster-whisper. This is expected but means a third-party package (and its dependencies) will be installed from PyPI and models will be downloaded from the network on first run.
- Credentials
- okThe skill requests no environment variables, credentials, or config paths. The script only uses the command-line audio file argument.
- Persistence & Privilege
- okalways is false and the skill does not modify agent configuration or request persistent privileges.