Openai Whisper
PassAudited by VirusTotal on May 13, 2026.
Overview
Type: OpenClaw Skill Name: openai-whisper Version: 1.0.0 The skill bundle is benign. It provides instructions for using the `openai-whisper` CLI for local speech-to-text transcription. The `SKILL.md` defines the skill, its purpose, and installation via `brew install openai-whisper`, which is a standard and legitimate method. Example commands demonstrate local file processing, and the mention of models downloading to `~/.cache/whisper` is expected behavior for the `whisper` CLI. There is no evidence of malicious intent, data exfiltration, unauthorized execution, prompt injection against the agent, or obfuscation.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing and using the skill will run the locally installed Whisper CLI and may download model files into the user's cache directory.
The skill relies on an external Homebrew package and first-run Whisper model downloads. This is disclosed and purpose-aligned, but users are trusting those external artifacts rather than code included in the skill.
"install":[{"id":"brew","kind":"brew","formula":"openai-whisper","bins":["whisper"]}] ... "Models download to `~/.cache/whisper` on first run."Install only from a trusted Homebrew setup, expect model files to be cached locally, and remove the package or cache if you no longer want them.