Auto Whisper Safe

• Analyzed: May 14, 2026, 4:02 AM
• Findings: 1
• Version: 1.1.0
• Hash: 7e38e444c055dc6ccd1a08b70598981bc6e47ff0a520b94974c8b16cce7cb07b
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a RAM-safe voice transcription utility. The `SKILL.md` instructions guide the OpenClaw agent to use the `transcribe.sh` script for audio files, which is a direct and intended use of the skill without any prompt injection attempts to subvert agent behavior. The `transcribe.sh` script itself demonstrates good security practices, including proper quoting of all user-controlled inputs (e.g., `$AUDIO_FILE`, `$OUTPUT_DIR`) when passed to `ffmpeg` and `whisper` commands, thereby preventing shell injection vulnerabilities. It also securely handles temporary files using `mktemp -d` and ensures cleanup with a `trap` command. No evidence of data exfiltration, malicious execution, persistence mechanisms, or obfuscation was found.