ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Gettr Transcribe

v1.0.1

Download audio from a GETTR post or streaming page and transcribe it locally with MLX Whisper on Apple Silicon (with timestamps via VTT). Use when given a GE...

⭐ 0· 417·0 current·0 all-time
by@kevin37li
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (GETTR → local transcription) matches the files and runtime instructions: scripts only download media via ffmpeg and call mlx_whisper to transcribe. Required binaries (ffmpeg, mlx_whisper) are expected for this task and the install metadata lists only pip/brew installs relevant to transcription.
✓
Instruction Scope
SKILL.md instructs obtaining the media URL via browser automation or manual DOM inspection, then running the provided scripts. The instructions do not request unrelated files, system credentials, or broad data collection; they only reference the GETTR URL, derived slug, and local output directory. The skill explicitly excludes gated/authenticated posts.
✓
Install Mechanism
The only install steps are standard package installs: 'brew install ffmpeg' and 'pip install mlx-whisper' (both declared in metadata). There are no downloads from arbitrary/personal URLs or extracted archives in the install spec.
✓
Credentials
No environment variables, credentials, or config paths are required. The only potential external access is to GETTR media URLs (user-supplied) and MLX Whisper may download models from Hugging Face if needed — the README/instructions note possible Hugging Face auth but do not demand credentials.
✓
Persistence & Privilege
The skill does not request permanent presence (always=false), does not modify other skills or system-wide agent settings, and only writes output to a local subdirectory under ./out/gettr-transcribe/<slug> as expected.
Assessment
This skill appears to do what it says: extract a media URL from a GETTR page (you provide or the agent collects via browser automation), download audio with ffmpeg, and transcribe locally with mlx_whisper. Before installing, note: (1) it requires ffmpeg and mlx_whisper on PATH (brew/pip installs are suggested); (2) MLX Whisper may download large models from Hugging Face and could prompt for huggingface-cli login for some models — no credentials are required by default; (3) the agent does not handle private/gated GETTR posts (you must supply a direct media URL for those); (4) transcription is local but downloading media from GETTR means the skill will fetch remote content you point it at; and (5) CPU/ram/disk usage can be significant for large models. If you’re comfortable with those tradeoffs, the skill is internally coherent.

Like a lobster shell, security has layers — review code before you run it.

gettrvk9794tg3xxn4rg044pzyhng4xn81kk0mlatestvk9796w6cgxn0bkes6rwv1kxgzd81mnkctranscriptionvk9794tg3xxn4rg044pzyhng4xn81kk0mvideovk9794tg3xxn4rg044pzyhng4xn81kk0mwhispervk9794tg3xxn4rg044pzyhng4xn81kk0m

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📺 Clawdis
Binsmlx_whisper, ffmpeg

Install

Install ffmpeg (brew)
Bins: ffmpeg
brew install ffmpeg

Comments