ClawHub

Zhipu Asr

v1.0.2

Automatic Speech Recognition (ASR) using Zhipu AI (BigModel) GLM-ASR model. Use when you need to transcribe audio files to text. Supports Chinese audio trans...

⭐ 0· 817·4 current·5 all-time
byxiaofei@franklu0819-lang
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
ℹ
Purpose & Capability
The name/description, SKILL.md, and the included shell script all align with an ASR transcription skill. The only minor inconsistency is metadata in package.json/_meta.json (and package.json lists only jq in openclaw.requires while the script also requires curl and ffmpeg); this looks like sloppy packaging rather than malicious behavior.
✓
Instruction Scope
Runtime instructions and the script stay within scope: they read the provided audio file, optionally convert it with ffmpeg, check size/duration, and POST the file and optional context/hotwords to the declared Zhipu API endpoint. The script does not read other environment variables, system files, or contact unexpected endpoints.
✓
Install Mechanism
There is no install spec (instruction-only with a shipped shell script). That is low-risk; no external archives or binaries are downloaded by the skill itself. The script requires standard system tools (jq, curl, ffmpeg) already expected for this functionality.
✓
Credentials
Only ZHIPU_API_KEY is requested, which is proportionate to uploading audio to Zhipu's API. No other secrets or unrelated credentials are required or referenced.
✓
Persistence & Privilege
always is false and the skill does not attempt to modify other skills or system settings. It does not request persistent elevated presence beyond normal user invocation.
Assessment
This skill appears to do exactly what it says: convert audio locally (ffmpeg) and upload it to Zhipu's transcription API using ZHIPU_API_KEY. Before installing, confirm you trust the destination (open.bigmodel.cn) and are comfortable sending audio (which may contain sensitive PII) to that external service. Ensure ffmpeg/curl/jq are installed from trusted package sources. Note the small metadata inconsistencies (package.json/_meta.json versions and declared required bins) — these look like packaging oversights but you may want to verify the packaged files match the registry metadata and the published version if that matters to you.

Like a lobster shell, security has layers — review code before you run it.

latestvk973j5tsjer8nv1zhpgv4qc04982ss6v

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

Binsjq, curl, ffmpeg
EnvZHIPU_API_KEY

Comments