yap

PassAudited by ClawScan on May 1, 2026.

Overview

This skill is a straightforward macOS speech-to-text wrapper, with only the normal caution that it installs and runs a third-party command-line tool.

This appears safe and purpose-aligned for transcribing audio or video files on macOS. Before installing, make sure you are comfortable installing the third-party yap Homebrew package, and only transcribe files you intend the local tool to process.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI04: Agentic Supply Chain Vulnerabilities

What this means

Installing the skill means installing and running an external command-line program on the user’s Mac.

Why it was flagged

The skill depends on installing a third-party Homebrew formula. This is coherent with a CLI transcription tool, but users should trust the package source before installing it.

Skill content

brew | formula: finnvoor/tools/yap | creates binaries: yap

Recommendation

Review the Homebrew formula or upstream project if desired, and install only if you trust the maintainer/source.