openclaw-whisper-voice

This skill appears coherent and implements local Whisper transcription as described, but review and consider the following before installing: - The installer will pip-install a large set of Python packages into your home (~/.local) and will download model weights into ~/.cache/whisper on first run. Expect significant network, disk, and CPU usage. - The install script fetches get-pip.py and uses pip from public indexes (PyPI and PyTorch wheel index). If you require stricter controls, run the install in a virtualenv, container, or on a throwaway host; or mirror/verify packages internally. - The scripts create ~/.local/bin/whisper and a symlinked ffmpeg shim. If you already have system binaries with the same names, be aware of PATH ordering or adjust PYTHON_BIN/MY_BIN as needed. - There are no secret/credential requirements and the scripts do not exfiltrate data. Still, inspect the scripts yourself (they are short and included) and run them as a discretionary user (not root). - If you have limited resources or want to avoid installing heavy deps (e.g., triton/torch), consider using a smaller model, a dedicated VM, or a cloud transcription service instead. If you want additional confidence, provide checksums for the scripts or request a signed release from the skill author before running the installer on production hosts.