← 返回 Skills 市场
transcribe-video
作者
Pengfei Ni
· GitHub ↗
· v1.0.0
· MIT-0
77
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install transcribe-video
功能描述
Extract transcript or subtitles from a local video file. Use this skill whenever the user asks to transcribe a video, extract speech-to-text, get subtitles,...
安全使用建议
This skill appears to do what it says (extract embedded subtitles or send audio to OpenAI for transcription), but the package metadata omits two important requirements: (1) you must have ffmpeg/ffprobe installed on the host, and (2) you must create ~/.transcribe_video.env containing OPENAI_API_KEY (and optional OPENAI_API_BASE/TRANSCRIBE_MODEL). Before installing/using: (a) review the included scripts (scripts/transcribe.py) yourself and ensure you trust the code and the unknown publisher, (b) be aware that audio will be uploaded to an external API (privacy risk), (c) if you don’t want network transcription, use only embedded subtitles or adopt an offline STT tool, and (d) ask the publisher to update the manifest to declare required binaries and the primary credential so the skill's metadata accurately reflects its needs. If you proceed, run it in a controlled environment (or without network access) until you are comfortable.
功能分析
Type: OpenClaw Skill
Name: transcribe-video
Version: 1.0.0
The skill contains shell injection vulnerabilities in `SKILL.md`, where user-provided file paths are directly interpolated into bash commands (ffprobe and ffmpeg) using simple double quotes, which does not prevent command substitution (e.g., $(payload)). Additionally, the skill requires the user to store sensitive API keys in a plaintext configuration file (`~/.transcribe_video.env`). While the Python script `scripts/transcribe.py` uses safer subprocess handling, the instructions provided to the AI agent for pre-processing steps introduce significant execution risks.
能力标签
能力评估
Purpose & Capability
The skill claims to transcribe local video files which aligns with the included script and instructions. However, the registry metadata declares no required binaries or env vars while the SKILL.md and scripts require ffmpeg/ffprobe and an OpenAI API key file (~/.transcribe_video.env). The absence of these declared requirements in the manifest is an incoherence: a legitimate transcribe skill should list ffmpeg/ffprobe and the API key as required.
Instruction Scope
The SKILL.md stays largely within the stated purpose: it checks for embedded subtitles, extracts audio, and calls an external transcription API. It instructs the agent to read ~/.transcribe_video.env for credentials (explicitly stated) and to run ffprobe/ffmpeg and a local Python script. There is no unrelated file collection, but the instructions do send audio off-host to the OpenAI API, which is expected for API-based transcription but is a privacy consideration the user should be aware of.
Install Mechanism
This is an instruction-only skill with no install spec; the included Python script and instructions rely on user-installed tools and Python packages. No downloads from arbitrary URLs or hidden installers are present.
Credentials
The code expects credentials (OPENAI_API_KEY and optional OPENAI_API_BASE / TRANSCRIBE_MODEL / AZURE_API_VERSION) loaded from ~/.transcribe_video.env, but the skill metadata declares no required env or primary credential. Requesting an API key (a sensitive secret) is proportionate to doing cloud transcription, but the manifest should explicitly declare it. The skill will transmit audio to an external service (OpenAI or Azure OpenAI) — this is necessary for API transcription but important to surface to users.
Persistence & Privilege
The skill does not request persistent or global privileges (always:false). It does not modify other skills or system-wide configuration. Its runtime behavior is limited to reading a dedicated env file in the user's home, invoking ffmpeg, and calling an external API.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install transcribe-video - 安装完成后，直接呼叫该 Skill 的名称或使用
/transcribe-video触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
- Initial release: transcribe-video skill extracts transcripts or subtitles from local video files.
- Automatically checks for embedded subtitles first for fast, accurate results; uses speech-to-text API if none are found.
- Supports popular video formats: mp4, mkv, mov, avi, webm, and others ffmpeg can read.
- Guides user through dependencies for API transcription if required.
- Outputs a text transcript file in the same folder as the video, and shows a preview with basic info.
元数据
常见问题
transcribe-video 是什么？
Extract transcript or subtitles from a local video file. Use this skill whenever the user asks to transcribe a video, extract speech-to-text, get subtitles,... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 77 次。
如何安装 transcribe-video？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install transcribe-video」即可一键安装，无需额外配置。
transcribe-video 是免费的吗？
是的，transcribe-video 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
transcribe-video 支持哪些平台？
transcribe-video 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 transcribe-video？
由 Pengfei Ni（@feiskyer）开发并维护，当前版本 v1.0.0。
推荐 Skills