← 返回 Skills 市场

Cloudflare Whisper Worker

Name: Cloudflare Whisper Worker
Author: lotfinity

作者 lotfinity · GitHub ↗ · v1.0.0

cross-platform ⚠ suspicious

366

总下载

当前安装

版本数

在 OpenClaw 中安装

/install cloudflare-whisper-worker

功能描述

Transcribe audio using a deployed Cloudflare Worker Whisper endpoint. Use when converting voice/audio files (wav, mp3, m4a, ogg, webm) to text through the cu...

使用说明 (SKILL.md)

Cloudflare Whisper Worker

Use this skill to transcribe audio through the deployed Whisper Worker API.

Endpoint

Base URL: https://lotfi-whisper-worker.medtouradmin.workers.dev
Route: POST /transcribe
Auth: Authorization: Bearer \x3CAPI_TOKEN>
Body: raw audio bytes (--data-binary @file)

Required environment variable

Set token once per shell:

export WHISPER_WORKER_TOKEN="\x3Cyour_token>"

Transcribe a file (JSON response)

curl -sS -X POST "https://lotfi-whisper-worker.medtouradmin.workers.dev/transcribe" \
  -H "content-type: audio/wav" \
  -H "authorization: Bearer $WHISPER_WORKER_TOKEN" \
  --data-binary "@audio.wav"

Transcribe and return only text

curl -sS -X POST "https://lotfi-whisper-worker.medtouradmin.workers.dev/transcribe" \
  -H "content-type: audio/wav" \
  -H "authorization: Bearer $WHISPER_WORKER_TOKEN" \
  --data-binary "@audio.wav" \
| jq -r '.result.text // .text // .result.response // empty'

Content-Type guide

WAV: audio/wav
MP3: audio/mpeg
M4A: audio/mp4
OGG/OPUS: audio/ogg
WEBM: audio/webm

Common errors

401 Unauthorized: missing/invalid bearer token
400 Empty audio body: file path wrong or empty file
400 Send raw audio...: invalid content-type header
500: worker/runtime/model error; retry and inspect full JSON

安全使用建议

This skill will upload whatever audio you point it at to the specific worker URL (https://lotfi-whisper-worker.medtouradmin.workers.dev) using a Bearer token. Before installing or using it: 1) Verify and trust the owner/operator of that workers.dev host — do not send sensitive or regulated audio to an unknown third party. 2) Ask the publisher to update metadata to declare WHISPER_WORKER_TOKEN and the required binaries (curl, jq) so you can evaluate requirements upfront. 3) Use a dedicated, scoped token (not a shared account credential), and rotate/delete it after use. 4) If privacy is critical, consider self‑hosting your own worker or using a trusted transcription provider. 5) Ensure curl and jq are available on the machine where you run the script.

功能分析

Type: OpenClaw Skill Name: cloudflare-whisper-worker Version: 1.0.0 The skill is designed to send local audio files to an external third-party Cloudflare Worker endpoint (lotfi-whisper-worker.medtouradmin.workers.dev) for transcription. While this behavior is clearly aligned with the stated purpose in SKILL.md and scripts/transcribe.sh, the transmission of data to an unverified external domain constitutes a risky capability. No evidence of intentional malice, such as credential theft or secondary data exfiltration, was found.

能力评估

ℹ Purpose & Capability

The name/description match the included script and instructions: they POST raw audio to a Whisper Worker /transcribe route with a Bearer token. However the registry metadata does not declare the required WHISPER_WORKER_TOKEN nor does it list required binaries (the script uses curl and jq), which is an inconsistency between claimed requirements and actual runtime needs.

ℹ Instruction Scope

SKILL.md and the script are narrowly scoped to uploading an audio file to the given endpoint and extracting text. They do not attempt to read unrelated files or system credentials. Important runtime behavior: audio bytes (potentially sensitive) and the Authorization token are transmitted to the specified workers.dev host; this is expected for the stated purpose but is an important privacy implication.

✓ Install Mechanism

No install spec and only an included shell script — nothing is downloaded or written during install. Low install risk.

⚠ Credentials

The skill requires a bearer token (WHISPER_WORKER_TOKEN) to call the endpoint, but the metadata did not declare any required environment variables. The script also depends on curl and jq which are not declared. Requiring a token to use a third‑party transcription endpoint is proportionate to the purpose, but the missing metadata and the fact that audio and tokens are sent to an externally hosted endpoint raise privacy and trust concerns.

✓ Persistence & Privilege

The skill does not request persistent presence (always is false) and does not modify other skills or system-wide configuration.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install cloudflare-whisper-worker
安装完成后，直接呼叫该 Skill 的名称或使用 /cloudflare-whisper-worker 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial release: Cloudflare Whisper worker transcription skill with bearer auth and helper script.

元数据

Slug cloudflare-whisper-worker

版本 1.0.0

许可证 —

累计安装 1

当前安装数 1

历史版本数 1

常见问题