📦 Faster Whisper Transcription — 极速语音转文字
v1.0.0基于 Faster Whisper 模型，将本地音频文件快速、私密地转写为文字，无需联网即可实现高质量语音识别。
0· 1.0k·5 当前·5 累计
by 下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
可疑
medium confidenceThe skill's stated purpose (local transcription via Faster Whisper) matches its instructions, but the runtime instructions are incomplete and ask you to pip-install an external package (with a risky flag) and run an unexplained CLI — this mismatch and the install step warrant caution.
评估建议
This skill's goal (local transcription using Faster Whisper) is reasonable, but the instructions are incomplete and ask you to install a third-party pip package into your system Python using --break-system-packages. Before installing or running it, consider: 1) Verify the faster-whisper package source (PyPI project page, GitHub repo) and inspect its code or release artifacts; 2) Avoid --break-system-packages — install inside a virtualenv, conda env, or container to isolate changes; 3) Confirm wh...详细分析 ▾
ℹ 用途与能力
Name/description align with using Faster Whisper for local transcription and the SKILL.md asks to pip-install faster-whisper and run a transcription command, which is generally consistent. However the skill provides no code and no explicit source for the 'voice-transcribe' command it instructs you to run, leaving a gap between claimed capability and provided artifacts.
⚠ 指令范围
Instructions tell the agent/user to run 'pip3 install --break-system-packages faster-whisper' and then run 'voice-transcribe /path/to/audio.ogg'. That install step causes arbitrary remote code to be installed into the system Python environment (the --break-system-packages flag is potentially destructive), and the SKILL.md does not explain where the 'voice-transcribe' CLI comes from or what it will do with the audio (download models, network activity, file writes). The instructions therefore are incomplete and grant broad discretion to install/run third-party code.
⚠ 安装机制
This is an instruction-only skill, but it explicitly asks to pip-install a third-party package from the network. Installing a pip package is a moderate-risk operation because it downloads and executes code from PyPI (or whatever index pip resolves to). The use of --break-system-packages increases risk by allowing modification of the system Python environment instead of suggesting a virtualenv/containerized install.
✓ 凭证需求
The skill requests no environment variables, credentials, or config paths. There is no direct request for unrelated secrets or system credentials.
✓ 持久化与权限
The skill does not request always:true, does not declare installs that modify other skills or system-wide settings in the registry metadata, and is user-invocable only. No elevated persistence is requested by the manifest.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/22
- Initial release of the Voice Transcription Skill. - Transcribes audio files locally using Faster Whisper for privacy. - Supports multiple model sizes: tiny, base, small, medium. - Simple command-line usage for voice file transcription. - Outputs transcribed text from voice messages.
● 可疑
安装命令
点击复制官方npx clawhub@latest install faster-whisper-transcribe
镜像加速npx clawhub@latest install faster-whisper-transcribe --registry https://cn.longxiaskill.com