ClawdBites
PassAudited by ClawScan on May 1, 2026.
Overview
ClawdBites is a coherent instruction-only recipe extraction skill with expected local tool use and optional recipe wishlist storage, and the provided artifacts do not show deception, credential use, exfiltration, or destructive behavior.
Before installing, be comfortable with the required local tools and package installs. The skill may automatically download and transcribe a public Instagram reel after you provide a link, and it can optionally save recipes to a persistent wishlist if you ask it to.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
After you send a reel link, the skill may download the video and transcribe its audio without asking again if the caption is incomplete.
The skill instructs the agent to use local command-line tools to download and transcribe a user-provided Instagram reel. This is central to the stated purpose, but it is still notable because it triggers network media retrieval and local processing automatically after the user provides a reel link.
Automatically proceed to audio transcription ... Download video: `yt-dlp -o "/tmp/reel.mp4" "URL"` ... `ffmpeg -y -i /tmp/reel.mp4 ...` ... `whisper /tmp/reel.wav --model base`
Use it only with public reels you intend to process, and avoid sending links you do not want downloaded or transcribed locally.
Installing the dependency will run third-party package installation code on your machine.
The skill documents a shell-based Python package installation for Whisper. This is expected for local transcription, but the package version is not pinned in the provided artifact.
"whisper","kind":"shell","command":"pip3 install --user openai-whisper","label":"Install Whisper (local, no API key)"
Install dependencies from trusted sources, consider pinning or reviewing the package version, and keep yt-dlp, ffmpeg, and Whisper updated.
Recipes you choose to save may persist across sessions and influence future meal-planning suggestions.
The skill can persist extracted recipe data in a memory file and make it available to another planning workflow. This is disclosed and user-directed, but users should notice that saved recipes may be reused later.
"Add to wishlist" → Save to `memory/recipe-wishlist.json` ... "The meal-planner skill can reference this skill: When planning meals, check wishlist for untried recipes"
Only save recipes you want retained, and review or delete `memory/recipe-wishlist.json` if you no longer want the data used.