← Back to Skills Marketplace
Parakeet Local Asr
by
Roman Slysh
· GitHub ↗
· v0.1.0
685
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install parakeet-local-asr
Description
Install and operate local NVIDIA Parakeet ASR for OpenClaw with an OpenAI-compatible transcription API on Ubuntu/Linux and macOS (Intel/Apple Silicon). Use w...
Usage Guidance
This skill does what it claims (sets up a local Parakeet ASR) but its installer clones and executes third-party code from GitHub with no verification. Before running: 1) Review the remote repository (setup.sh and start-parakeet.sh) yourself or run the bootstrap in an isolated VM/container. 2) Avoid setting PARAKEET_REPO_URL to untrusted repos. 3) Prefer a pinned commit or checksum; if you must use the default repo, inspect its setup script after cloning and before executing. 4) Run as a non-root user, and consider blocking outbound network access until you confirm expected behavior. If you are not comfortable auditing the remote repo, do not run these scripts on production or sensitive machines.
Capability Analysis
Type: OpenClaw Skill
Name: parakeet-local-asr
Version: 0.1.0
The skill bundle is suspicious due to several scripts allowing critical environment variables to override default paths and URLs, leading to potential remote code execution (RCE) and data exfiltration vulnerabilities. Specifically, `scripts/bootstrap.sh` and `scripts/start.sh` execute external code from a GitHub repository whose URL can be controlled by `PARAKEET_REPO_URL`. Furthermore, `scripts/smoke-test.sh` uploads a local file to a URL that can be controlled by `PARAKEET_URL`, creating a significant risk for data exfiltration if an attacker can manipulate these environment variables. The `SKILL.md` itself does not contain malicious prompt injection.
Capability Assessment
Purpose & Capability
Name/description match the behavior: scripts bootstrap, start, healthcheck, and smoke-test a local ASR service. However the bootstrap step clones and runs setup/start scripts from a remote repo (https://github.com/rundax/parakeet-asr.git by default), which is necessary for installing the ASR but introduces supply-chain trust requirements (no pinned commit or checksum).
Instruction Scope
SKILL.md tells the agent to run the provided scripts which in turn run ./setup.sh and ./start-parakeet.sh from the cloned repo. Those downstream scripts (not included here) may perform package-manager actions, install services, or contact external endpoints. The skill's own safety note says to ask before elevated/package-manager ops, but the bootstrap script directly executes the remote setup script with no verification or explicit interactive confirmation.
Install Mechanism
There is no install spec in the registry, but bootstrap.sh performs a git clone/pull from a third-party GitHub repository and runs its setup script: a high-risk download-and-execute pattern. There is no pinned commit, no signature/checksum, and subsequent pulls can change behavior after install.
Credentials
The skill declares no required credentials or config paths (reasonable for a local ASR). The scripts honor PARAKEET_DIR and PARAKEET_URL and also support overriding the repo via PARAKEET_REPO_URL (not documented in SKILL.md). That override lets callers point the installer at an arbitrary repo, which increases risk if misused.
Persistence & Privilege
The skill is user-invocable and not always-enabled. It does not itself request persistent platform privileges, but the repo's setup/start scripts (fetched at runtime) could install services or modify system configuration — this is possible but not evident from the included files.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install parakeet-local-asr - After installation, invoke the skill by name or use
/parakeet-local-asr - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.0
Initial release of local NVIDIA Parakeet ASR skill for OpenClaw.
- Enables deterministic installation and operation of Parakeet ASR on Ubuntu/Linux and macOS (Intel/Apple Silicon).
- Provides OpenAI-compatible API endpoint for local/private speech-to-text.
- Includes guided scripts for install, start, healthcheck, and smoke testing.
- Allows override of install path via environment variable.
- Documents OpenClaw voice stack integration and fallback options.
- Defines safety rules for installation and process management.
Metadata
Frequently Asked Questions
What is Parakeet Local Asr?
Install and operate local NVIDIA Parakeet ASR for OpenClaw with an OpenAI-compatible transcription API on Ubuntu/Linux and macOS (Intel/Apple Silicon). Use w... It is an AI Agent Skill for Claude Code / OpenClaw, with 685 downloads so far.
How do I install Parakeet Local Asr?
Run "/install parakeet-local-asr" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Parakeet Local Asr free?
Yes, Parakeet Local Asr is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Parakeet Local Asr support?
Parakeet Local Asr is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Parakeet Local Asr?
It is built and maintained by Roman Slysh (@hantok); the current version is v0.1.0.
More Skills