Back to skill
Skillv1.0.0
ClawScan security
Video Transcribe · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignFeb 28, 2026, 8:09 AM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill does what it says: local transcription using ffmpeg + the Whisper CLI; optional AI Edit functionality can upload files to an external service if you enable it.
- Guidance
- Transcription: safe and local — the provided script extracts audio, runs the Whisper CLI, and writes .txt/.srt files next to your input file; it needs ffmpeg and the openai-whisper CLI (pip). Before installing: verify you trust the openai-whisper package and have the required system resources for the chosen Whisper model. Privacy: transcripts remain local unless you explicitly use the optional AI Edit flow. AI Edit: the SKILL.md shows an upload flow that sends your video to a remote API (SPARKI_API_BASE / agent-api-test.aicoding.live) and requires a SPARKI_API_KEY—do not set or share that key unless you accept uploading media to that third-party service. If you plan to use AI Edit, review any upload code and the external service's privacy/TOS and verify the SPARKI endpoint is legitimate before enabling the key.
Review Dimensions
- Purpose & Capability
- okThe skill's name/description (video → text) match the declared requirements (ffmpeg and whisper) and the included transcribe.sh implements exactly that. Required binaries are appropriate and proportionate.
- Instruction Scope
- noteThe main runtime instructions and scripts operate locally (extract audio, call whisper, write .txt and .srt next to the input). However SKILL.md also documents an optional 'AI Edit' workflow that uploads files to an external API and requires a SPARKI_API_KEY; that networked behavior is outside core transcription and only applies if you enable/use AI Edit.
- Install Mechanism
- okThis is instruction-only (no install spec). It recommends installing ffmpeg and pip-installing openai-whisper (whisper CLI). No remote archive downloads or unusual install locations are used by the skill itself.
- Credentials
- noteThe skill itself requires no environment variables. The optional AI Edit feature requires a SPARKI_API_KEY (external service) — this is not required for transcription but will be needed if you use AI Edit, which uploads assets to a third-party endpoint.
- Persistence & Privilege
- okalways:false and user-invocable:true. The skill does not request elevated persistence or modify other skills' configs. The SKILL.md suggests using openclaw config to store SPARKI_API_KEY if you opt in, which is normal for enabling external integrations.