Transcribe audio files via OpenRouter using audio-capable models

• Risk level: Low
• Analyzed: May 1, 2026, 4:42 AM
• Findings: 2
• Version: 1.0.0

Overview

The skill matches its stated purpose; it transcribes user-chosen audio by sending it to OpenRouter using your API key.

This appears safe for its stated purpose. Before installing, be aware that the audio files you choose to transcribe will be sent to OpenRouter using your API key, so avoid using it for recordings you would not share with that provider.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI03: Identity and Privilege Abuse

Note

What this means

Requests may be billed to or associated with your OpenRouter account.

Why it was flagged

The script uses the user's OpenRouter API key as a bearer token to authenticate the transcription request. This is expected for an OpenRouter integration and no unrelated credential use is shown.

Skill content

-H "Authorization: Bearer $OPENROUTER_API_KEY"

Recommendation

Use an OpenRouter key intended for this purpose, keep it private, and monitor provider usage if cost or quota matters.

ASI07: Insecure Inter-Agent Communication

Note

What this means

Any audio you transcribe leaves your machine and is processed by OpenRouter and the selected model provider.

Why it was flagged

The skill clearly discloses that audio content is sent to OpenRouter for transcription. This is purpose-aligned, but audio files can contain private or sensitive information.

Skill content

Sends to OpenRouter chat completions with `input_audio` content

Recommendation

Only use this skill for audio you are comfortable sending to OpenRouter, and review OpenRouter/model-provider privacy and retention policies for sensitive recordings.