Transcribe audio via OpenAI Audio Transcriptions API (Whisper).

This skill simply uploads a local audio file to OpenAI's transcription endpoint using curl and your OPENAI_API_KEY. Before installing, consider: (1) Privacy — your audio is sent to OpenAI; don't upload sensitive audio unless you're comfortable with OpenAI's handling and retention policies. (2) Keep your OPENAI_API_KEY secret and revoke it if compromised. (3) The SKILL.md mentions storing a key in ~/.openclaw/openclaw.json for convenience, but the script only reads the OPENAI_API_KEY environment variable — ensure you understand how your platform provides keys. (4) Verify network access to api.openai.com and that curl is the expected binary on your system. The included shell script is short, readable, and not obfuscated; no other endpoints or hidden behaviors were found.

Type: OpenClaw Skill Name: mh-openai-whisper-api Version: 1.0.0 The skill bundle is designed to transcribe audio using the OpenAI Whisper API, a legitimate function. The `SKILL.md` provides clear instructions and examples without any malicious prompt injection attempts. The `scripts/transcribe.sh` script correctly handles user input by properly quoting variables (`"$in"`, `"$out"`, `"${model}"`, etc.) when used in shell commands and by passing parameters to `curl` as form fields (`-F`), which prevents shell injection. There is no evidence of data exfiltration beyond the stated purpose (sending audio to OpenAI), persistence, obfuscation, or other malicious behaviors.