Azure Ai Transcription Py
v0.1.0Azure AI Transcription SDK for Python. Use for real-time and batch speech-to-text transcription with timestamps and diarization. Triggers: "transcription", "speech to text", "Azure AI Transcription", "TranscriptionClient".
⭐ 1· 2k·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The name, description, and SKILL.md consistently describe an Azure speech-to-text client (batch and streaming). The examples reference azure-ai-transcription and Azure endpoints, which is coherent with the stated purpose. However, the registry metadata declares no required environment variables or credentials while the runtime docs require TRANSCRIPTION_ENDPOINT and TRANSCRIPTION_KEY — this mismatch is unexpected.
Instruction Scope
SKILL.md instructions are narrowly scoped to installing the client, configuring an endpoint/key, and calling the TranscriptionClient for batch or real-time transcription. The only file access shown is audio files (local or blob URLs) needed for transcription. There are no instructions to read unrelated system files, credentials, or send data to endpoints outside Azure/storage examples.
Install Mechanism
The skill is instruction-only (no install spec), but the SKILL.md explicitly tells users to run `pip install azure-ai-transcription`. That means installing a PyPI package at runtime (network fetch, code execution). This is expected for a Python SDK but is a non-trivial step not reflected in metadata — consider verifying the package origin and integrity before installing.
Credentials
The runtime docs require TRANSCRIPTION_ENDPOINT and TRANSCRIPTION_KEY (Azure endpoint and subscription key). Those credentials are appropriate for the described service, but the skill metadata declares no required env vars or primary credential. The mismatch is a red flag because credentials are necessary for operation yet not declared in the manifest; verify where/how the key will be provided and that it has least-privilege permissions.
Persistence & Privilege
The skill does not request persistent presence (always: false) and is user-invocable. There is no indication it modifies other skills or system-wide settings. Autonomous invocation is allowed by default but not combined with other high-risk signals here.
What to consider before installing
This SKILL.md describes a legitimate Azure transcription client, but the package and credentials handling need verification before installing. Before you install or run it: 1) Confirm the pip package name (azure-ai-transcription) on PyPI and that it is the official Azure SDK or a trusted publisher; prefer pinned versions. 2) Don't paste your TRANSCRIPTION_KEY into public places; use least-privilege keys and consider managed identity or safer auth if available. 3) Be aware pip install fetches and runs code from the network — audit the package or review its source first. 4) Ask the skill author or registry maintainer to declare required environment variables (TRANSCRIPTION_ENDPOINT, TRANSCRIPTION_KEY) in the metadata so the manifest matches runtime requirements. If you cannot verify the package origin or the skill metadata remains inconsistent, treat it as risky and avoid installing.Like a lobster shell, security has layers — review code before you run it.
latestvk97f5nspq4yqmhxqwdb8azrhj5809209
License
MIT-0
Free to use, modify, and redistribute. No attribution required.