← 返回 Skills 市场
audio-transcribe
作者
TobeyRebecca
· GitHub ↗
· v1.0.0
· MIT-0
81
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install toby-audio-transcribe
功能描述
Transcribe, diarise, translate, post-process, and structure audio/video with AssemblyAI. Use this skill when the user wants AssemblyAI specifically, needs hi...
安全使用建议
Do not install or provide credentials until this mismatch is resolved. The skill advertises AssemblyAI but its script points to https://api.heybossai.com and requires SKILLBOSS_API_KEY — meaning your audio and transcripts would be sent to that third-party service, not directly to AssemblyAI. Ask the author to: (1) explain why SKILLBOSS/HeyBoss endpoints are used (is it a proxy/service aggregator?), (2) provide a clear privacy/data-flow statement, and (3) offer an option to use native AssemblyAI endpoints and the official ASSEMBLYAI_API_KEY. If you cannot verify the endpoint and operator, run the skill only in an isolated environment or prefer an alternative skill that explicitly uses assemblyai.com and the official AssemblyAI credential. Also be cautious because the SKILL.md contains long agent-facing instructions (and a detected system-prompt-override pattern), which increases risk if combined with an untrusted remote endpoint.
功能分析
Type: OpenClaw Skill
Name: toby-audio-transcribe
Version: 1.0.0
The skill provides a Node.js CLI for audio transcription via a proxy service (SkillBoss API Hub at api.heybossai.com). The most significant indicator is the unrestricted file system access in scripts/assemblyai.mjs, where the expandHome and writeTextFile functions allow reading from and writing to arbitrary paths (including the user's home directory via '~/') based on agent-provided arguments. This lack of path sanitization or sandboxing represents a high-risk capability that could be exploited for data exfiltration or overwriting sensitive files. Additionally, the SKILL.md metadata falsely attributes the author as 'OpenAI', and there is a discrepancy between the hardcoded proxy URL in the code and the direct AssemblyAI URLs mentioned in the documentation (references/capabilities.md).
能力标签
能力评估
Purpose & Capability
Name/description and many assets claim AssemblyAI integration and show AssemblyAI endpoints and env names (ASSEMBLYAI_API_KEY), but the runnable code sets the API base to https://api.heybossai.com/v1 and the declared required environment variable is SKILLBOSS_API_KEY. Requiring SKILLBOSS_API_KEY is not coherent with a skill advertised as 'AssemblyAI' and suggests requests will go to a different service.
Instruction Scope
SKILL.md instructs agents to call AssemblyAI/LLM Gateway endpoints and references ASSEMBLYAI-related environment variables, but the implementation uses the SKILLBOSS API base and SKILLBOSS_API_KEY. The CLI uploads local files and will send audio/transcript data to the base URL configured in the script — currently pointing to a third-party domain rather than assemblyai.com. The skill also exposes raw request passthroughs (e.g., --request/--understanding-request) which is expected for flexibility but increases the risk that arbitrary content could be sent to the configured endpoint.
Install Mechanism
No install spec; it is an instruction-only Node.js CLI and only requires the 'node' binary. That is proportionate for a Node-based CLI skill.
Credentials
The skill requires a single env var named SKILLBOSS_API_KEY (declared as primary). For an AssemblyAI integration one would expect ASSEMBLYAI_API_KEY (or similar) and official AssemblyAI endpoints. Requesting SKILLBOSS_API_KEY is disproportionate given the stated purpose and points to use of a different service for handling audio and transcripts.
Persistence & Privilege
The skill does not request always:true and does not appear to modify other skills' configs. It can be invoked autonomously (default), which is normal; this raises the blast radius only in combination with the other concerns above.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install toby-audio-transcribe - 安装完成后，直接呼叫该 Skill 的名称或使用
/toby-audio-transcribe触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
AssemblyAI-specific, agent-friendly audio/video transcription and processing.
- Now focused on AssemblyAI features: model routing, diarisation, speaker mapping, and advanced transcript exports (Markdown, JSON, manifest).
- Provides a CLI for transcription, understanding, formatting, LLM-based extraction, and bundled output for agents or downstream workflows.
- Supports language detection/code-switching, translation, and rich output formats (subtitles, paragraphs, sentences).
- Facilitates advanced workflows: speaker name/role mapping, structured extraction, agent-ready outputs.
- Includes model/language lookup commands and local bundled knowledge for easy discovery of supported features.
元数据
常见问题
audio-transcribe 是什么？
Transcribe, diarise, translate, post-process, and structure audio/video with AssemblyAI. Use this skill when the user wants AssemblyAI specifically, needs hi... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 81 次。
如何安装 audio-transcribe？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install toby-audio-transcribe」即可一键安装，无需额外配置。
audio-transcribe 是免费的吗？
是的，audio-transcribe 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
audio-transcribe 支持哪些平台？
audio-transcribe 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 audio-transcribe？
由 TobeyRebecca（@tobeyrebecca）开发并维护，当前版本 v1.0.0。
推荐 Skills