Quicklrc Transcribe

AdvisoryAudited by Static analysis on May 4, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Anyone using the configured key can make transcription requests that may spend your QuickLRC credits.

Why it was flagged

The skill requires a QuickLRC account API key and successful use can consume account credits. This is disclosed and purpose-aligned, but users should treat the key as sensitive and monitor usage.

Skill content
Set `QUICKLRC_API_KEY` to your API key from https://quicklrc.com/dashboard. ... Cost = audio duration rounded up to the nearest minute.
Recommendation

Use a dedicated API key if possible, keep it out of chat logs and shared files, monitor credit usage, and revoke or rotate the key if it is exposed.

What this means

Media URLs and lyrics you provide may be processed by QuickLRC rather than staying local.

Why it was flagged

The workflow sends the media URL and, optionally, user-provided lyrics to the QuickLRC external API. This data sharing is central to the skill's function and is disclosed.

Skill content
sends an audio/video URL and gets back a synced subtitle file ... `"lyrics": "Hello world\nThis is line two"`
Recommendation

Only submit URLs and lyrics that you are allowed to share with QuickLRC, and review QuickLRC's privacy and retention terms for sensitive content.