Local Whisper (cpp)

• Analyzed: May 12, 2026, 4:11 AM
• Findings: 1
• Version: 1.0.0
• Hash: b8250e274e0b5e975d5221091689dbaa2bc5bce81b007b4d719e5fee02246e74
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is benign. It provides a wrapper script (`scripts/whisper-local.sh`) to run the `whisper-cli` tool for local speech-to-text transcription. The `SKILL.md` documentation includes a `wget` command to download a large language model from `huggingface.co`, which is a legitimate source for ML models and a standard setup step for such applications. There is no evidence of prompt injection, data exfiltration, malicious execution, or persistence mechanisms.