Qwen ASR (C-based Offline)
PassAudited by VirusTotal on May 11, 2026.
Overview
Type: OpenClaw Skill Name: rightister-qwen-asr Version: 1.0.0 The skill is a legitimate wrapper for the qwen-asr C implementation by antirez, providing offline Chinese speech-to-text capabilities. The execution script (scripts/run.sh) handles audio preprocessing via FFmpeg and manages model inference safely, requiring manual user intervention for repository cloning and model downloads rather than performing automated remote execution. While the script contains a minor functional bug in temporary directory creation (mktemp usage), it lacks any indicators of malicious intent, data exfiltration, or prompt injection.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If the external checkout or downloaded model is not the intended trusted version, the skill could build or run different local code than the user expects.
The core ASR implementation is expected to come from an external GitHub checkout and may be built locally, but the artifacts do not pin a commit or provide hashes for the repo/model.
Run: git clone https://github.com/antirez/qwen-asr ~/.openclaw/workspace/qwen-asr ... make blas
Clone only from a trusted source, pin or verify the exact commit and model files, and consider building the binary manually before invoking the skill.
The skill will run local ffmpeg and qwen_asr binaries against the selected audio file.
The runner invokes local command-line tools to convert audio and run inference, which is expected for an ASR wrapper but still means invoking the skill executes local binaries.
ffmpeg -y -i "$AUDIO" -ar 16000 -ac 1 -f wav ... "$BIN" "${ARGS[@]}"Use trusted local binaries, keep the audio path user-selected, and declare ffmpeg/make/qwen_asr requirements so users know what will execute.
Users may be surprised that the skill needs FFmpeg despite the no-FFmpeg-dependency claim.
The documentation simultaneously says there is no FFmpeg dependency and describes FFmpeg-based preprocessing, which can mislead users about required local tooling.
无 Python/GIL/FFmpeg 依赖 ... 仅支持 `.ogg`/`.mp3`/`.wav`→`.wav` 预处理（FFmpeg 内置支持）
Clarify that the ASR engine is C-based but the wrapper uses FFmpeg for audio conversion, and list FFmpeg in requirements if it is needed.