Whisper Transcriber

Offline speech-to-text (ASR) using whisper.cpp (whisper-cli) + ffmpeg. Supports batch transcription, timestamps, SRT/TXT/JSON outputs, and model download. Cr...

This skill appears to do what it says, but review and be cautious before running the installer and scripts: 1) The installer will call your system package manager (may prompt for sudo) and will download large model files from https://huggingface.co/ggerganov/whisper.cpp — ensure you have sufficient disk space and trust that source. 2) config.json contains empty modelsSha256 entries, so by default the provided integrity check has no expected hashes; the scripts will only verify if those fields are filled and the host has shasum/sha256sum (the small node -e helper used for verification requires node to be present). 3) Prefer running install.sh and transcribe.sh manually (inspect them first), do not run them as root unless you understand the package installs, and consider running inside an isolated environment (VM or container) if you want extra safety. 4) If you plan to enable autonomous agent invocation, remember the skill will download models and run local binaries on any audio it processes — ensure your agent's permissions and inputs are appropriate. If you want, I can point out the exact lines in the scripts that perform downloads, package installs, and sha256 checks so you can inspect them before running.

Type: OpenClaw Skill Name: whisper-transcriber Version: 1.0.0 The skill is a legitimate offline speech-to-text tool utilizing whisper.cpp and ffmpeg. The installation and transcription scripts (install.sh, transcribe.sh) perform expected actions such as system package management and downloading models from Hugging Face (huggingface.co). No evidence of data exfiltration, persistence, or malicious prompt injection was found.