ClawHub

Link Transcriber

v0.1.10

Use this skill when a user wants to submit a Douyin or Xiaohongshu link to the linkTranscriber transcription API, let the server use its saved platform cooki...

⭐ 0· 46·0 current·0 all-time
by@bobobo2026
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
CryptoCan make purchases
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the observed behavior: the skill accepts a Douyin/Xiaohongshu link, calls a hosted linkTranscriber API, polls for completion, requests a summary, and returns only the final summary. Required inputs and files (Python runner, health check) are proportional to this purpose.
ℹ
Instruction Scope
Instructions consistently limit the agent to creating/polling transcription tasks and calling the summaries endpoint; they explicitly forbid browsing the page or asking users for cookies. Important operational note: user-provided links (and any metadata the service requires) are sent to an external origin (default https://linktranscriber.store/linktranscriber-api), so installing the skill exposes those links to that third-party service — this is expected but worth awareness.
✓
Install Mechanism
No install spec is provided (instruction-only distribution) and included scripts are plain Python using urllib. Nothing is downloaded or executed from non-standard URLs during install. The bundle contains example runners and an update script that invokes the clawhub CLI; those are standard and transparent.
✓
Credentials
The skill requests no secrets or config paths. It supports optional environment overrides (LINK_SKILL_API_BASE_URL, LINK_SKILL_SUMMARY_PROVIDER_ID, LINK_SKILL_SUMMARY_MODEL_NAME and polling settings) which are reasonable for testing and local deployment. Be aware that changing LINK_SKILL_API_BASE_URL to an untrusted endpoint would redirect user links elsewhere (operator-controlled).
✓
Persistence & Privilege
The skill does not request persistent or elevated platform privileges (always:true is not set). It is user-invocable and allows autonomous invocation per platform defaults — expected for skills. It does not modify other skills or system configs.
Assessment
This skill is internally consistent with its description: it sends Douyin/Xiaohongshu links to the hosted linkTranscriber API and returns only the summary. Before installing, confirm you trust the external service at https://linktranscriber.store/linktranscriber-api (links you paste will be transmitted to that service). If you need stronger privacy assurances, do not install or only use it against a self-hosted/explicitly trusted API by setting LINK_SKILL_API_BASE_URL. You can locally validate behavior by running scripts/check_service_health.py and scripts/call_service_example.py to inspect responses. Also note the skill will execute immediately when a supported link is provided (it intentionally skips user confirmation).

Like a lobster shell, security has layers — review code before you run it.

latestvk9725a97sdv93z9ddqqznpn22984emb8

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments