Step Asr
v1.0.0Transcribe audio files to text via Step ASR streaming API (HTTP SSE). Supports Chinese and English, multiple audio formats (PCM, WAV, MP3, OGG/OPUS), real-ti...
⭐ 1· 309·1 current·1 all-time
byLi Xie@randzero
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, required env var (STEPFUN_API_KEY), declared primary credential, and the network endpoint in the code (https://api.stepfun.com/v1/audio/asr/sse) all align with a Step/StepFun ASR client.
Instruction Scope
SKILL.md instructs running the included Python script to read a local audio file and send it to the Step ASR API; the runtime instructions and script only read the specified audio file, optional output path, and the declared API key. There are no instructions to read unrelated files or credentials.
Install Mechanism
No install step is provided (instruction-only) and a single small Python script is included; nothing is downloaded from untrusted URLs and no archives are extracted.
Credentials
Only STEPFUN_API_KEY is required and used as the Authorization header. No other secrets, unrelated credentials, or config paths are requested or accessed.
Persistence & Privilege
Skill is not always-enabled and does not modify other skills or system-wide settings. It runs on-demand and does not request persistent elevated privileges.
Assessment
This skill appears to implement exactly what it claims: it base64-encodes a local audio file and sends it to the Step/StepFun ASR endpoint using the STEPFUN_API_KEY. Before installing, consider: (1) Privacy—audio you transcribe is uploaded to StepFun, so avoid sending sensitive audio unless you trust the service and key; (2) API key handling—store the STEPFUN_API_KEY securely and avoid hardcoding it; (3) Resource use—the script reads the entire file into memory (may be large for long audio); (4) Review network access—the script contacts api.stepfun.com, which matches the description; (5) If you need different behavior (streaming chunks from disk rather than single large upload), inspect/modify the script. Overall the skill is coherent with its stated purpose.Like a lobster shell, security has layers — review code before you run it.
latestvk97e9knhcrnn6dtbr5z4w3tdms823c8e
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎙 Clawdis
Binspython3
EnvSTEPFUN_API_KEY
Primary envSTEPFUN_API_KEY