Local Whisper Hardened

• Verdict: Pass
• Confidence: High
• Analyzed: Apr 29, 2026, 1:41 AM
• Findings: 0
• Version: 1.0.0

Overview

The skill's code, instructions, and requirements are consistent with a local Whisper transcription tool; it requires ffmpeg and local Python packages and does not ask for unrelated credentials or perform unexpected network exfiltration.

This skill appears coherent for local Whisper transcription, but take these precautions before installing: 1) Confirm you trust the openai-whisper and torch packages and install them only from the documented PyPI/PyTorch index (avoid custom/unknown indexes). 2) Expect large model downloads and substantial disk usage — check available disk space and bandwidth. 3) Use the recommended virtual environment (.venv) to avoid contaminating your system Python. 4) Follow the SAFETY.md guardrails: do not pipe transcriptions to shells or automatic executors and do not upload transcripts to external endpoints without explicit review. 5) If you require higher assurance, inspect the packages you will install (package metadata, checksums, source repo) before running pip and consider installing in an isolated sandbox or offline environment.