Groq Whisper
Security checks across malware telemetry and agentic risk
Overview
The skill is internally consistent: it transcribes a local audio file by uploading it to Groq's Whisper API using curl/jq and an optional Groq API key.
This skill appears to do exactly what it says: it uploads a local audio file to Groq's transcription API and prints the returned text. Before installing, confirm you are comfortable sending audio to Groq (do not use for sensitive audio if that is a concern), keep your GROQ_API_KEY private (store it with strict file permissions or as an env var), and ensure curl and jq are installed. You can review the included scripts (transcribe.sh) yourself — it only reads the provided file and the optional credentials file and calls api.groq.com. Note the agent can call the skill autonomously (normal default) but the skill is not force-enabled (always:false). If you operate in a multi-user/shared environment, avoid placing keys in globally readable locations.
SkillSpector
SkillSpector findings are pending for this release.
VirusTotal
VirusTotal findings are pending for this skill version.