Transcribe audio/video to LRC, SRT, WebVTT, ASS, TTML and create karaoke videos
PassAudited by VirusTotal on May 4, 2026.
Overview
Type: OpenClaw Skill Name: karadeo Version: 1.0.1 The skill bundle provides documentation and API specifications for Karadeo, a karaoke and lyrics transcription service. It defines standard Model Context Protocol (MCP) and REST API endpoints hosted on karadeo.com. There are no signs of malicious code, data exfiltration, or prompt injection attempts; the content is strictly informational for agent integration.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If the API key is exposed in prompts, logs, or shared files, someone else may be able to use the user's Karadeo account quota or permissions.
The credential requirement is disclosed and expected for a hosted API, but the key is still sensitive account authority that users should protect.
All API endpoints require a Bearer API key from https://karadeo.com/dashboard. Authorization: Bearer kd_<your-api-key>
Use a dedicated, revocable Karadeo API key if possible, avoid pasting real keys into shared chats or files, and revoke the key if it is exposed.
Media URLs and optional transcript text submitted through this skill may be processed by Karadeo, so private or confidential media could leave the user's local environment.
The skill uses a remote MCP/API provider and sends media URLs to that provider. This is central to the stated purpose, but it is an external data boundary.
Endpoint: POST https://karadeo.com/api/mcp ... `fileUrl` | string | yes | Publicly accessible audio/video URL
Only submit media URLs you are allowed to share with Karadeo, review Karadeo's privacy and retention terms, and avoid making sensitive files publicly accessible unless necessary.