Transcribe audio files via OpenRouter using audio-capable models
v1.0.0Transcribe audio files via OpenRouter using audio-capable models (Gemini, GPT-4o-audio, etc).
⭐ 3· 3.3k·11 current·11 all-time
by@obviyus
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name/description match the included script: the script converts audio, encodes it, and calls OpenRouter's chat/completions API with input_audio. The required binaries (ffmpeg, base64, jq, curl) are appropriate for this task. However, registry metadata shown earlier (no required env vars / no primary credential) contradicts the SKILL.md metadata and the script, which do require OPENROUTER_API_KEY — this mismatch is unexpected.
Instruction Scope
SKILL.md and the script stay within the stated purpose (audio conversion, base64, POST to openrouter.ai). There are no hidden external endpoints or attempts to read unrelated system files. But SKILL.md documents an alternative API-key storage path (~/.clawdbot/clawdbot.json) that is not implemented in the script (the script only checks OPENROUTER_API_KEY env var). This is an inconsistency between documentation and implementation that could confuse users and lead to misconfiguration.
Install Mechanism
No install spec — instruction-only with a bundled shell script. This is low risk compared to remote downloads or package installs. The file is plain shell script, readable, and does not extract or run external installers.
Credentials
The only secret actually required by the script is OPENROUTER_API_KEY, which is proportionate for calling OpenRouter. The SKILL.md metadata correctly lists required binaries and OPENROUTER_API_KEY, but the registry summary in the provided data claimed 'no required env vars' — that inconsistency should be resolved. SKILL.md's suggestion to store keys in ~/.clawdbot/clawdbot.json is not reflected in code, so the declared config path is misleading.
Persistence & Privilege
The skill does not request always:true and does not alter other skills or global agent settings. It uses temporary files and cleans them up via trap; no persistent credentials are stored by the script. Autonomous invocation is allowed by default but is not combined with other broad privileges here.
What to consider before installing
This skill appears to do what it says (convert audio and call OpenRouter), but there are documentation/metadata inconsistencies you should resolve before use. Specifically: (1) the script requires OPENROUTER_API_KEY — ensure the registry metadata advertises this and you provide a key you trust; (2) SKILL.md mentions storing the key in ~/.clawdbot/clawdbot.json but the script does not read that file — do not assume the key will be read from disk; (3) the script sends X-Title and an HTTP-Referer header (defaulting to 'Clawdbot' and https://clawdbot.com) which will appear in your OpenRouter dashboard — change or remove these defaults if you don't want identifying metadata sent; (4) inspect and (if needed) run the script in an isolated environment first to confirm it behaves as expected and to test large-file handling; and (5) ask the skill author/maintainer to fix the metadata vs. code discrepancies (registry declarations, SKILL.md vs actual behavior) before trusting it with real credentials.Like a lobster shell, security has layers — review code before you run it.
latestvk970ma0vk3kg4h43aargq0dzy17ynx6v
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎙️ Clawdis
Binscurl, ffmpeg, base64, jq
EnvOPENROUTER_API_KEY
Primary envOPENROUTER_API_KEY