Assembly Large Audio Transcriber
v1.0.0Transcribe large audio files (100MB+, up to 1GB/12 hours) with speaker diarization. Uses AssemblyAI API with direct HTTP calls. Supports MP3, WAV, M4A, FLAC,...
⭐ 0· 29·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description match the code and SKILL.md: both call AssemblyAI endpoints and require ASSEMBLYAI_API_KEY. The requested credential is appropriate for the stated purpose.
Instruction Scope
Instructions stay within transcription scope (upload, submit, poll, format, archive). Two small scope concerns: SKILL.md suggests writing archives to /workspace/memory/meetings/... but the included script writes a .transcript.json next to the input file (inconsistent); SKILL.md also includes conversational text asking the user to 'tell 许霸天 your API Key'—do not hand your API key to third parties.
Install Mechanism
No install spec (instruction-only + one script) so nothing is written by an installer. SKILL.md suggests 'pip install requests' but the bundled script uses urllib (no requests required). This is an inconsistency but not a malicious install mechanism.
Credentials
Only ASSEMBLYAI_API_KEY is required, which is proportional. Note: SKILL.md's text encouraging users to give their API key to the operator is a potential social-engineering risk—you should keep your key private and provision it yourself.
Persistence & Privilege
always is false and the skill does not request system-wide changes or other skills' credentials. Autonomous invocation is enabled (default) but not combined with other red flags.
Assessment
This skill appears to be what it claims: it uploads audio to AssemblyAI and polls for a transcript, and it only needs your ASSEMBLYAI_API_KEY. Before installing or running it: 1) Do not share your API key with anyone—SKILL.md's suggestion to 'tell 许霸天 your API Key' is a social-engineering prompt and unnecessary. 2) Be aware audio is uploaded to AssemblyAI (read their privacy/TOS) — do not upload sensitive audio you don't want processed/stored by a third party. 3) Implementation notes: the bundled Python script reads the entire file into memory (f.read()), which may exhaust RAM for very large files; consider streaming uploads or splitting large files first. 4) SKILL.md recommends pip install requests but the included script uses urllib; this inconsistency is harmless but indicates the package may be lightly maintained—review code yourself. 5) Confirm where transcripts are archived (script writes file_path + '.transcript.json'; SKILL.md's /workspace/memory path is not enforced by the script). If you will use this, supply your own AssemblyAI API key and test with a small file first.Like a lobster shell, security has layers — review code before you run it.
audiovk97c1trpg5ddz3q3zhfeg4fh5s84hqj9chinesevk97c1trpg5ddz3q3zhfeg4fh5s84hqj9large-filevk97c1trpg5ddz3q3zhfeg4fh5s84hqj9latestvk97c1trpg5ddz3q3zhfeg4fh5s84hqj9speechvk97c1trpg5ddz3q3zhfeg4fh5s84hqj9transcriptionvk97c1trpg5ddz3q3zhfeg4fh5s84hqj9
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
EnvASSEMBLYAI_API_KEY