Skillv1.1.0

ClawScan security

Voice Note Transcriber Cn V1.1 · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignMar 2, 2026, 11:37 AM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: This is an instruction-only Chinese voice-note transcriber template; it asks for no credentials, installs, or file access and its instructions match the described features.
Guidance: This skill is an instruction-only template and appears coherent with its stated purpose. However, it contains no implementation details: when actually used the platform/agent that implements it will perform audio capture and transcription. Before installing/using, verify where audio data will be sent and processed (local model vs. third‑party ASR services), what logging/retention/billing policies apply, and whether the agent is sandboxed from exfiltrating audio or transcripts. If you care about privacy, confirm microphone access rules, confirm no hidden installs or external downloads occur at runtime, and consider limiting autonomous invocation or reviewing runtime permissions for handling sensitive meeting content.

Purpose & Capability: okThe name/description (voice-to-text, realtime subtitles, translation, clipping, SRT export) align with the SKILL.md examples and prompts; nothing requested is unrelated to that purpose.
Instruction Scope: okSKILL.md contains user/AI prompt templates and examples for transcribing, translating, marking, clipping and exporting subtitles. It does not instruct the agent to read system files, environment variables, or external unrelated config, nor does it direct data to unexpected endpoints.
Install Mechanism: okThere is no install spec and no code files; this is instruction-only, so nothing is written to disk or fetched during install.
Credentials: okThe skill declares no required environment variables, credentials, or config paths. The described functionality reasonably requires access to audio input at runtime, but no secrets are requested in the SKILL.md.
Persistence & Privilege: okalways is false and default autonomous invocation is allowed — expected. The skill does not request permanent presence or modify other skills or system-wide settings.