← 返回 Skills 市场

Faster Whisper Transcription

Name: Faster Whisper Transcription
Author: kalmuraee

作者 Khalid Almuraee · GitHub ↗ · v1.0.0

cross-platform ⚠ suspicious

1069

总下载

当前安装

版本数

在 OpenClaw 中安装

/install faster-whisper-transcribe

功能描述

Transcribes local voice messages to text using Faster Whisper models for fast, privacy-focused speech recognition on audio files.

使用说明 (SKILL.md)

Voice Transcription Skill

Transcribes voice messages using Faster Whisper (local, privacy-first).

Requirements

pip3 install --break-system-packages faster-whisper

Usage

# Transcribe a voice file
voice-transcribe /path/to/audio.ogg

# Or use with media path
voice-transcribe ~/.openclaw/media/inbound/file_xxx.ogg

Models

tiny - Fastest, lowest accuracy (default)
base - Balanced
small - Better accuracy
medium - High accuracy (requires more RAM)

Output

Returns transcribed text from voice messages.

安全使用建议

This skill's goal (local transcription using Faster Whisper) is reasonable, but the instructions are incomplete and ask you to install a third-party pip package into your system Python using --break-system-packages. Before installing or running it, consider: 1) Verify the faster-whisper package source (PyPI project page, GitHub repo) and inspect its code or release artifacts; 2) Avoid --break-system-packages — install inside a virtualenv, conda env, or container to isolate changes; 3) Confirm whether the 'voice-transcribe' CLI is provided by that package and what network or model downloads it will perform (model downloads can be large and may contact external servers); 4) Test installation and transcription in a sandboxed VM/container first to ensure no unexpected behavior or data exfiltration; 5) If you cannot verify the package/source, do not run the pip install on a production machine. If you want, provide the package source URL or the exact command the agent will run and I can re-evaluate with more detail.

功能分析

Type: OpenClaw Skill Name: faster-whisper-transcribe Version: 1.0.0 The skill bundle is classified as suspicious due to the use of `pip3 install --break-system-packages` in `SKILL.md`. While installing a legitimate library (`faster-whisper`), this flag bypasses Python's PEP 668 safety mechanism, which can lead to system instability or conflicts by installing packages into the system Python environment. This represents a vulnerability or risky practice, but not direct evidence of malicious intent like data exfiltration or backdoor installation.

能力评估

ℹ Purpose & Capability

Name/description align with using Faster Whisper for local transcription and the SKILL.md asks to pip-install faster-whisper and run a transcription command, which is generally consistent. However the skill provides no code and no explicit source for the 'voice-transcribe' command it instructs you to run, leaving a gap between claimed capability and provided artifacts.

⚠ Instruction Scope

Instructions tell the agent/user to run 'pip3 install --break-system-packages faster-whisper' and then run 'voice-transcribe /path/to/audio.ogg'. That install step causes arbitrary remote code to be installed into the system Python environment (the --break-system-packages flag is potentially destructive), and the SKILL.md does not explain where the 'voice-transcribe' CLI comes from or what it will do with the audio (download models, network activity, file writes). The instructions therefore are incomplete and grant broad discretion to install/run third-party code.

⚠ Install Mechanism

This is an instruction-only skill, but it explicitly asks to pip-install a third-party package from the network. Installing a pip package is a moderate-risk operation because it downloads and executes code from PyPI (or whatever index pip resolves to). The use of --break-system-packages increases risk by allowing modification of the system Python environment instead of suggesting a virtualenv/containerized install.

✓ Credentials

The skill requests no environment variables, credentials, or config paths. There is no direct request for unrelated secrets or system credentials.

✓ Persistence & Privilege

The skill does not request always:true, does not declare installs that modify other skills or system-wide settings in the registry metadata, and is user-invocable only. No elevated persistence is requested by the manifest.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install faster-whisper-transcribe
安装完成后，直接呼叫该 Skill 的名称或使用 /faster-whisper-transcribe 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

- Initial release of the Voice Transcription Skill. - Transcribes audio files locally using Faster Whisper for privacy. - Supports multiple model sizes: tiny, base, small, medium. - Simple command-line usage for voice file transcription. - Outputs transcribed text from voice messages.

元数据

Slug faster-whisper-transcribe

版本 1.0.0

许可证 —

累计安装 5

当前安装数 4

历史版本数 1

常见问题