Voice To Text

• Analyzed: May 12, 2026, 4:13 AM
• Findings: 0
• Version: 1.0.0
• Hash: 03afbaa0d5a7b53c5e7ae5f63f6f1111320335ff773fe86a8434fc9bdb5aadc5
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: voice-to-text Version: 1.0.0 The skill is designed for voice-to-text transcription using Vosk and FFmpeg. All operations, including dependency installation and model downloads, are from official and legitimate sources (alphacephei.com for Vosk models, standard package managers for FFmpeg and Vosk Python package). The `transcribe.py` script correctly uses `subprocess.run` with a list of arguments for executing `ffmpeg`, which prevents shell injection vulnerabilities from user-provided audio file paths. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts against the agent. The code and instructions align with the stated purpose and lack high-risk behaviors.