Burmese Audio Understanding

v1.2.2

High-accuracy Burmese audio transcription using Gemini 3.1 Flash Preview.

0· 48·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description, SKILL.md, package.json, and the provided script all focus on sending a local audio file to the Google Gemini API for transcription. The declared requirement (GEMINI_API_KEY) matches the stated integration with Google Gemini. Minor: package.json version (1.2.1) differs from registry metadata (1.2.2), but this is a packaging/version inconsistency rather than a functional mismatch.
Instruction Scope
Runtime instructions are limited and specific: set GEMINI_API_KEY, run the Node script on a local audio file. The script uploads the file via the SDK, requests a transcription, prints it, and deletes the uploaded file. It does not reference unrelated files, extra environment variables, or external endpoints beyond the Google Gemini API.
Install Mechanism
There is no install spec; dependencies are standard npm (the SKILL.md requests running `npm install @google/genai`). Installing a single official SDK dependency is proportional to the task. No downloads from untrusted URLs or archive extraction are present.
Credentials
Only GEMINI_API_KEY is required and is appropriate for calling the Google Gemini API. No unrelated secrets or system credential paths are requested.
Persistence & Privilege
The skill is not always-enabled, does not request persistent elevated privileges, and does not modify other skills or system-wide agent settings.
Assessment
This skill appears to do exactly what it says: upload a local audio file to Google Gemini for transcription. Before installing or running it: ensure you trust the @google/genai package version you'll install, protect the GEMINI_API_KEY (store it securely and grant only necessary permissions), be aware that audio data is transmitted to Google's servers (including any personally identifying content), and revoke the key if it is ever exposed. Also consider running npm installs in an isolated environment (container or VM) and confirm the package.json version matches the published registry artifact if version provenance matters to you.

Like a lobster shell, security has layers — review code before you run it.

audiovk979cqqtqzwyvnx6vcc884en7984c99fburmesevk979cqqtqzwyvnx6vcc884en7984c99fgeminivk979cqqtqzwyvnx6vcc884en7984c99flatestvk9762xhce6dg9nnb6hn0z3xzbs84ctwqtranscriptvk979cqqtqzwyvnx6vcc884en7984c99f

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments