Security audit
Security checks across malware telemetry and agentic risk
The skill does transcribe videos, but it needs review because normal use can change your machine and crafted command options could run unintended local code.
Install only if you are comfortable reviewing and running local scripts that download media, create transcript/audio files, create a Python virtual environment, and may install Homebrew or Python packages. Prefer installing dependencies yourself from trusted sources, avoid passing untrusted option values to the shell wrapper, and do not provide cloud API keys because this version does not actually implement cloud transcription.
result = subprocess.run(["which", cmd], capture_output=True)
if result.returncode != 0:
print(f"Warning: {cmd} not found. Installing...")
subprocess.run(["brew", "install", cmd], check=False)
# 下载音频
def download_audio(url: str, output_dir: Path) -> str:import whisper
except ImportError:
print("Installing whisper...")
subprocess.run(["uv", "pip", "install", "whisper"], check=True)
import whisper
print(f"Loading Whisper {model} model...")66/66 vendors flagged this skill as clean.
No suspicious patterns detected.