Voice Note To Midi

Convert voice notes, humming, and melodic audio recordings to quantized MIDI files using ML-based pitch detection and intelligent post-processing

This package appears to do what it claims, but take these precautions before installing: (1) Inspect or obtain the hum2midi script from a trusted source (the setup will ask you to download it if not present). (2) Run setup.sh interactively and review it first — it will create ~/melody-pipeline, a Python venv, and may append a PATH update to your shell rc. (3) The installer uses pip to fetch packages (basic-pitch, librosa, etc.); installing packages runs code from PyPI — prefer running inside the created venv and review package reputations. (4) If you prefer less persistence, set INSTALL_DIR to a temporary location and decline the PATH change. (5) If you need higher assurance, manually clone the referenced repository URL and inspect hum2midi and any model-download behavior before running the installer.

Type: OpenClaw Skill Name: voice-note-to-midi Version: 0.1.0 The skill's `setup.sh` script includes an instruction for the user to manually download the `hum2midi` script from `https://raw.githubusercontent.com/basic-pitch/basic-pitch/main/hum2midi` if it's not found locally. While this is a manual instruction and the URL points to a legitimate project (Spotify's Basic Pitch), relying on an external URL for a core component introduces a supply chain risk. There is no clear evidence of intentional malicious behavior, but this external dependency is a notable high-risk behavior.