Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

transcription

v1.0.1

Transcribe audio and video files using OpenAI Whisper API. Use when user wants to transcribe audio/video files, extract speech from media, or get text from r...

0· 471·1 current·1 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for djismgaming/transcription.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "transcription" (djismgaming/transcription) from ClawHub.
Skill page: https://clawhub.ai/djismgaming/transcription
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install transcription

ClawHub CLI

Package manager switcher

npx clawhub@latest install transcription
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description say 'OpenAI Whisper API' and the code calls a Whisper-compatible endpoint; this is coherent. Minor mismatch: the SKILL.md and scripts point to a hardcoded local endpoint (http://192.168.0.11:8080/v1) rather than the public OpenAI cloud API — this is plausible (self-hosted Whisper) but should be explicit to users.
!
Instruction Scope
Runtime instructions and scripts will upload user-supplied audio/video files to a fixed HTTP endpoint (192.168.0.11:8080) and call ffmpeg locally. That means any file you provide will be transmitted to that host; ensure that host is trusted and network access is intended. The instructions do not provide an option to override the endpoint via an environment variable or configuration.
Install Mechanism
There is no install spec (instruction-only), which limits disk writes, but the skill ships Python scripts that require external runtime ingredients. The SKILL metadata does not declare required binaries or Python deps even though scripts call ffmpeg and import the requests library.
Credentials
The skill requests no credentials or environment variables (good), but it hardcodes an HTTP endpoint and model name. Because no auth is declared, the endpoint is assumed unauthenticated; ensure this is correct for your environment. Also the skill fails to declare that it requires ffmpeg and Python requests.
Persistence & Privilege
always is false and the skill doesn't request persistent platform privileges or modify other skills. It runs as-invoked and does not declare any elevated host privileges.
What to consider before installing
This skill will run included Python scripts and invoke ffmpeg, then upload whatever audio/video you provide to the hardcoded endpoint http://192.168.0.11:8080/v1. Before installing or using it: 1) Confirm that 192.168.0.11 is a trusted, intended Whisper service (or modify the scripts to point to a trusted endpoint or to read endpoint from a config/env var). 2) Ensure ffmpeg is installed and the Python 'requests' package is available (the skill metadata does not declare these). 3) Do not send sensitive audio to the skill until you verify the receiving host and its retention/privacy policies. 4) If you need to use an official OpenAI-hosted API, update the endpoint/auth appropriately rather than relying on the hardcoded address. 5) For extra caution, run the scripts on a sandbox machine and test with non-sensitive files first.

Like a lobster shell, security has layers — review code before you run it.

latestvk971kwcb6j187xgcjj9p9vthwd82srgh
471downloads
0stars
2versions
Updated 8h ago
v1.0.1
MIT-0

Transcription Skill

This skill provides transcription capabilities for audio and video files using the OpenAI Whisper API endpoint.

Quick Start

Send me an audio or video file and I'll transcribe it automatically! Just attach the file to your message.

Manual Usage

You can also run the script directly from the command line:

cd /home/openclaw/.openclaw/workspace/skills/transcription/scripts
python3 transcribe_audio.py inputfile.ogg

For video files:

python3 transcribe_audio.py video.mp4

Supported Formats

Audio: mp3, wav, mp4, mpeg, mpga, m4a, ogg, webm, flac, aac, wma

Video: mp4, mov, avi, mkv, webm (audio extracted automatically)

Usage Examples

How to use the python scripts for transcription:

python3 transcribe_audio.py inputfile.ogg

Features

  • Extract timestamps in output when needed
  • Batch processing - send multiple files at once
  • Video support - automatically extracts audio from video files
  • Multiple output formats - text, JSON, SRT subtitles, VTT captions

Technical Details

  • API Endpoint: http://192.168.0.11:8080/v1 (local Whisper endpoint)
  • Model: whisper-small (default)
  • Temperature: 0.0 (deterministic results)
  • Auto-extraction: ffmpeg handles video → audio conversion

Notes

  • Ensure files are clear and not too noisy for best results
  • Language auto-detection works well for most cases
  • For batch processing, send files one at a time or specify "batch" in your request

Scripts: scripts/transcribe_audio.py, scripts/transcribe_simple.py
References: references/transcription_guide.md

Comments

Loading comments...