K8s Self Hosted Whisper Api

Transcribe audio via the self-hosted Whisper ASR instance running on Kubernetes. Use this skill whenever the user wants to transcribe audio files, convert sp...

This skill is coherent for transcribing audio to a self-hosted Whisper service, but before installing or using it you should: (1) confirm the cluster-local endpoint (http://whisper-asr.whisper-asr.svc.cluster.local:9000) is the intended and trusted service — audio data will be uploaded there without authentication; (2) ensure the agent environment can reach that DNS name (it's a Kubernetes in-cluster name and may be unreachable from outside the cluster); (3) verify python3 is available if you plan to use the --prompt flag (the script falls back but may behave differently); and (4) treat transcripts/audio as potentially sensitive and ensure they are handled per your privacy policy. If any of these are unacceptable, do not enable the skill.

Type: OpenClaw Skill Name: openclaw-self-hosted-whisper Version: 0.1.0 The `transcribe.sh` script contains several critical vulnerabilities. It is susceptible to shell injection via the `--prompt` argument due to improper sanitization when embedding the value into a `python3 -c` command. Furthermore, the script allows arbitrary file reading and uploading to the internal Whisper service via the `INPUT_FILE` argument, and arbitrary file writing via the `OUT_FILE` argument, as both are directly derived from user input without sufficient validation. While these flaws could lead to remote code execution and data exfiltration, there is no clear evidence of intentional malicious design, classifying it as suspicious rather than malicious.