Whisper Local Api

Secure, offline, OpenAI-compatible local Whisper ASR endpoint for OpenClaw. Features faster-whisper (large-v3-turbo), built-in privacy with no cloud telemetr...

This skill appears to implement a local Whisper API but relies on cloning and running code from a remote repository and installing Python packages, which undermines the '100% offline' claim. Before installing: (1) inspect the remote repository (the default repo URL or any WHISPER_REPO_URL you set) and review its run_server.sh and requirements.txt for network calls or telemetry; (2) run the bootstrap/start steps inside a disposable VM or container; (3) be prepared that model weights may be downloaded at runtime (network access) and could be large; (4) if you need strict offline guarantees, obtain vetted offline artifacts (server code and model files) and set WHISPER_DIR to a local copy instead of cloning; (5) avoid supplying third-party WHISPER_REPO_URLs unless you trust the source.

Type: OpenClaw Skill Name: whisper-local-api Version: 1.0.0 The skill is classified as suspicious due to a significant supply chain vulnerability. The `scripts/bootstrap.sh` file allows overriding the `WHISPER_REPO_URL` environment variable, which dictates the Git repository to clone and execute. If an attacker can control this variable, they could inject a malicious repository, leading to arbitrary code execution during the setup phase. Additionally, the `SKILL.md` indicates the service binds to `0.0.0.0` by default, which, while warned about, exposes the service on all network interfaces, increasing the attack surface if the host is not properly firewalled. There is a benign prompt injection instruction in `SKILL.md` ('Ask before any package-manager operations') which aims to enhance safety, not to cause harm.