Openai Whisper Api

PassAudited by ClawScan on May 1, 2026.

Overview

This skill does what it says: it uploads a chosen audio file to OpenAI for transcription and saves the result locally.

Before installing, confirm you are comfortable sending selected audio files to OpenAI for transcription and using your OpenAI API key for those requests.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Any audio file you transcribe will be sent to OpenAI's API, and the transcript will be saved to the specified or default local path.

Why it was flagged

The script uses curl to upload the user-selected audio file to OpenAI and write the transcription response to a local output file, which is central to the skill's stated purpose.

Skill content
curl -sS https://api.openai.com/v1/audio/transcriptions ... -F "file=@${in}" ... >"$out"
Recommendation

Only use this skill with audio files you are comfortable sending to OpenAI, and check the output path before running it.

What this means

The skill needs access to your OpenAI API key to submit transcription requests that may incur account usage or cost.

Why it was flagged

The script uses the OPENAI_API_KEY environment variable to authenticate to OpenAI, which is expected for this API integration and is not shown being logged or sent elsewhere.

Skill content
-H "Authorization: Bearer $OPENAI_API_KEY"
Recommendation

Use an API key with appropriate account controls, monitor OpenAI usage, and do not place the key in shared logs or public configuration files.