← 返回 Skills 市场
Parakeet Local Asr
作者
Roman Slysh
· GitHub ↗
· v0.1.0
685
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install parakeet-local-asr
功能描述
Install and operate local NVIDIA Parakeet ASR for OpenClaw with an OpenAI-compatible transcription API on Ubuntu/Linux and macOS (Intel/Apple Silicon). Use w...
安全使用建议
This skill does what it claims (sets up a local Parakeet ASR) but its installer clones and executes third-party code from GitHub with no verification. Before running: 1) Review the remote repository (setup.sh and start-parakeet.sh) yourself or run the bootstrap in an isolated VM/container. 2) Avoid setting PARAKEET_REPO_URL to untrusted repos. 3) Prefer a pinned commit or checksum; if you must use the default repo, inspect its setup script after cloning and before executing. 4) Run as a non-root user, and consider blocking outbound network access until you confirm expected behavior. If you are not comfortable auditing the remote repo, do not run these scripts on production or sensitive machines.
功能分析
Type: OpenClaw Skill
Name: parakeet-local-asr
Version: 0.1.0
The skill bundle is suspicious due to several scripts allowing critical environment variables to override default paths and URLs, leading to potential remote code execution (RCE) and data exfiltration vulnerabilities. Specifically, `scripts/bootstrap.sh` and `scripts/start.sh` execute external code from a GitHub repository whose URL can be controlled by `PARAKEET_REPO_URL`. Furthermore, `scripts/smoke-test.sh` uploads a local file to a URL that can be controlled by `PARAKEET_URL`, creating a significant risk for data exfiltration if an attacker can manipulate these environment variables. The `SKILL.md` itself does not contain malicious prompt injection.
能力评估
Purpose & Capability
Name/description match the behavior: scripts bootstrap, start, healthcheck, and smoke-test a local ASR service. However the bootstrap step clones and runs setup/start scripts from a remote repo (https://github.com/rundax/parakeet-asr.git by default), which is necessary for installing the ASR but introduces supply-chain trust requirements (no pinned commit or checksum).
Instruction Scope
SKILL.md tells the agent to run the provided scripts which in turn run ./setup.sh and ./start-parakeet.sh from the cloned repo. Those downstream scripts (not included here) may perform package-manager actions, install services, or contact external endpoints. The skill's own safety note says to ask before elevated/package-manager ops, but the bootstrap script directly executes the remote setup script with no verification or explicit interactive confirmation.
Install Mechanism
There is no install spec in the registry, but bootstrap.sh performs a git clone/pull from a third-party GitHub repository and runs its setup script: a high-risk download-and-execute pattern. There is no pinned commit, no signature/checksum, and subsequent pulls can change behavior after install.
Credentials
The skill declares no required credentials or config paths (reasonable for a local ASR). The scripts honor PARAKEET_DIR and PARAKEET_URL and also support overriding the repo via PARAKEET_REPO_URL (not documented in SKILL.md). That override lets callers point the installer at an arbitrary repo, which increases risk if misused.
Persistence & Privilege
The skill is user-invocable and not always-enabled. It does not itself request persistent platform privileges, but the repo's setup/start scripts (fetched at runtime) could install services or modify system configuration — this is possible but not evident from the included files.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install parakeet-local-asr - 安装完成后,直接呼叫该 Skill 的名称或使用
/parakeet-local-asr触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.1.0
Initial release of local NVIDIA Parakeet ASR skill for OpenClaw.
- Enables deterministic installation and operation of Parakeet ASR on Ubuntu/Linux and macOS (Intel/Apple Silicon).
- Provides OpenAI-compatible API endpoint for local/private speech-to-text.
- Includes guided scripts for install, start, healthcheck, and smoke testing.
- Allows override of install path via environment variable.
- Documents OpenClaw voice stack integration and fallback options.
- Defines safety rules for installation and process management.
元数据
常见问题
Parakeet Local Asr 是什么?
Install and operate local NVIDIA Parakeet ASR for OpenClaw with an OpenAI-compatible transcription API on Ubuntu/Linux and macOS (Intel/Apple Silicon). Use w... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 685 次。
如何安装 Parakeet Local Asr?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install parakeet-local-asr」即可一键安装,无需额外配置。
Parakeet Local Asr 是免费的吗?
是的,Parakeet Local Asr 完全免费(开源免费),可自由下载、安装和使用。
Parakeet Local Asr 支持哪些平台?
Parakeet Local Asr 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Parakeet Local Asr?
由 Roman Slysh(@hantok)开发并维护,当前版本 v0.1.0。
推荐 Skills