← Back to Skills Marketplace
Openai Whisper Api
by
Peter Steinberger
· GitHub ↗
· v1.0.0
26010
Downloads
52
Stars
1180
Active Installs
1
Versions
Install in OpenClaw
/install openai-whisper-api
Description
Transcribe audio via OpenAI Audio Transcriptions API (Whisper).
Usage Guidance
Install only if you are comfortable sending the selected audio file to OpenAI for transcription and using your OPENAI_API_KEY. Choose the --out path deliberately, because the script will overwrite a writable file at that location.
Capability Analysis
Type: OpenClaw Skill
Name: openai-whisper-api
Version: 1.0.0
The skill is classified as suspicious due to a local file write vulnerability in `scripts/transcribe.sh`. The `--out` parameter allows the user to specify an arbitrary file path for the transcription output, which could lead to overwriting sensitive files (e.g., configuration files, startup scripts) if the user has write permissions to those locations. While the skill's primary purpose is legitimate, this lack of output path validation presents a significant security risk, potentially enabling data corruption or persistence if exploited by a malicious actor.
Capability Assessment
Purpose & Capability
The stated purpose is to transcribe audio via OpenAI's transcription API, and the script does only that: validates an input file, requires OPENAI_API_KEY, calls the OpenAI audio transcription endpoint with curl, and writes the response.
Instruction Scope
The instructions are narrow and user-directed, though users should understand that audio contents are sent to an external API and that --out controls the local destination file.
Install Mechanism
The package contains SKILL.md and one shell script, with metadata requiring curl and OPENAI_API_KEY; there are no install hooks, package downloads, background services, or automatic startup changes.
Credentials
Network access and an OpenAI API key are proportionate for API-based transcription. The output path is user-specified and can overwrite files the user can write, which is common for CLI tools but worth using carefully.
Persistence & Privilege
No artifact-backed evidence of persistence, privilege escalation, credential harvesting, hidden file indexing, or background execution was found.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install openai-whisper-api - After installation, invoke the skill by name or use
/openai-whisper-api - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Metadata
Frequently Asked Questions
What is Openai Whisper Api?
Transcribe audio via OpenAI Audio Transcriptions API (Whisper). It is an AI Agent Skill for Claude Code / OpenClaw, with 26010 downloads so far.
How do I install Openai Whisper Api?
Run "/install openai-whisper-api" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Openai Whisper Api free?
Yes, Openai Whisper Api is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Openai Whisper Api support?
Openai Whisper Api is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Openai Whisper Api?
It is built and maintained by Peter Steinberger (@steipete); the current version is v1.0.0.
More Skills