首页龙虾技能列表 › ifly-speed-transcription — iFlySpeedTranscription — 极速语音转文本

ifly-speed-transcription — iFlySpeedTranscription — 极速语音转文本

v1.0.0

利用 iFLYTEK 极速转写 API 实现超快语音转文本,支持 WAV/PCM/MP3 格式,最高可转 5 小时音频,仅需 ~20 秒/小时。支持中文、英文及 202 种中文方言自动识别。

0· 134·0 当前·0 累计
by @qingzhe2020 (Iflytek AIcloud)·MIT-0
下载技能包
License
MIT-0
最后更新
2026/4/11
安全扫描
VirusTotal
无害
查看报告
OpenClaw
可疑
medium confidence
该技能基本符合其声明目的(调用 iFLYTEK API),但包元数据和本地设置与 SKILL.md 及脚本不一致,建议谨慎安装。
评估建议
["该技能看似合法的 iFlytek 转写客户端,但存在需解决不一致:1) SKILL.md 和脚本要求三个环境秘钥(XFEI_APP_ID、XFEI_API_KEY、XFEI_API_SECRET),但注册元数据未列出环境变量 — 确认提供 API 凭证并修正元数据。2) 审查 scripts/transcribe.py 确保仅上传预期音频文件,不读取其他文件。注意 callback_url 使用 — 避免设置不可控制的端点。3) .claude/settings.local.json 包含作者本地绝对路径和允许的 Bash 命令 — 可能是包装元数据,建议检查/忽略或删除。4) 仅将 iFlytek 凭证提供给可信任代码;考虑为测试创建专用 API 密钥。若需更高保证,请求发布者更新注册元数据声明环境变量并移除作者本地权限文件,或者在沙盒容器中运行脚本并监控网络调用。"]...
详细分析 ▾
用途与能力
Functionality (audio upload, multipart upload, create/poll transcription tasks) matches the description of an iFLYTEK speed-transcription client. The code expects iFlytek credentials (app id, api key, api secret), which are appropriate for this purpose. However, the registry metadata lists no required environment variables/credentials even though SKILL.md and scripts clearly require XFEI_APP_ID / XFEI_API_KEY / XFEI_API_SECRET — this metadata omission is an inconsistency.
指令范围
SKILL.md gives concrete runtime instructions (set env vars, run python script, upload/poll workflow). The instructions themselves are scoped to transcription and do not ask for unrelated host data. One oddity: the repository contains a .claude/settings.local.json with Read and Bash permissions pointing to a user-specific Desktop path and zip commands; that file is not required for normal use and appears to be author-local packaging metadata rather than necessary runtime instructions, but it could reveal an over-broad permission intent if honored by an agent runtime.
安装机制
There is no install spec (instruction-only + a Python script). That lowers installation risk; dependencies are standard (requests, urllib3) listed in _meta.json. No remote archive downloads or unusual install sources are present in the provided files.
凭证需求
The script and SKILL.md require three secrets (XFEI_APP_ID, XFEI_API_KEY, XFEI_API_SECRET) — these are proportionate to calling the iFlytek API. The concern is that the skill registry metadata does not declare these required env vars (it lists none). This mismatch can lead to accidental omission of required secrets or confusion about what the skill will access. Also the skill supports an optional callback_url parameter — if set to an attacker-controlled endpoint it could be used to exfiltrate transcription results; users should inspect and control any callback_url usage.
持久化与权限
The skill is not always-enabled and uses normal autonomous invocation defaults — no elevated persistence requested. The only persistence/permission artifact is .claude/settings.local.json which enumerates local Bash and Read permissions (including reading an absolute Desktop path and running zip/py_compile). That file appears to be local packaging metadata and is not a necessary runtime privilege for the transcription task, but its presence is unusual and should be reviewed; it could indicate the author tested packaging with broad, user-specific filesystem access.
安全有层次,运行前请审查代码。

License

MIT-0

可自由使用、修改和再分发,无需署名。

运行时依赖

无特殊依赖

版本

latestv1.0.02026/3/19

["发布 ifly-speed-transcription 技能。","通过 iFLYTEK 极速转写 API 提供超快语音转文本(最多 5 小时音频,~20 秒/小时)。","支持中文、英文及 202 种中文方言自动检测。","允许通过 CLI 参数进行领域特定调优、speaker 分离和字幕输出。","包含错误处理和设置、使用、常见故障排除指南。"]

● 无害

安装命令 点击复制

官方npx clawhub@latest install ifly-speed-transcription
镜像加速npx clawhub@latest install ifly-speed-transcription --registry https://cn.clawhub-mirror.com

技能文档

请见下(保留原始 Markdown 格式,不翻译代码块、命令行和 YAML 前置物)

数据来源:ClawHub ↗ · 中文优化:龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制

免费技能或插件可能存在安全风险,如需更匹配、更安全的方案,建议联系付费定制

了解定制服务