41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill appears to perform video→audio download and local Whisper transcription as advertised, but there are several incoherences and some risky patterns (documentation vs. metadata mismatch, implic...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772938401656,
        "_id": "k976ymf6cj5g1a48dgpbmdvb9982grwa",
        "changelog": "- Initial release of the video-stt skill.\n- Extracts audio from video URLs and transcribes speech to text.\n- Supports both local Whisper models and multiple cloud APIs (OpenAI, Azure, Google).\n- Offers output in plain text, SRT, VTT, or JSON formats.\n- Includes command-line and Python usage instructions with environment setup guidance.",
        "changelogSource": "auto",
        "createdAt": 1772938401656,
        "parsed": {
            "clawdis": {
                "emoji": "🎬"
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "damienCronw",
        "handle": "damiencronw",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/128512183?v=4",
        "kind": "user",
        "linkedUserId": "kn77ykg8y6768p7n721pgxc7an82hq2s"
    },
    "ownerHandle": "damiencronw",
    "skill": {
        "_creationTime": 1772938401656,
        "_id": "kd7asw77hmcbs7ez5gfvkej0cn82g904",
        "badges": [],
        "createdAt": 1772938401656,
        "displayName": "video-stt",
        "latestVersionId": "k976ymf6cj5g1a48dgpbmdvb9982grwa",
        "ownerUserId": "kn77ykg8y6768p7n721pgxc7an82hq2s",
        "slug": "video-stt",
        "stats": {
            "comments": 0,
            "downloads": 193,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 1
        },
        "summary": "Extract audio from video URLs and transcribe using STT (Speech-to-Text). Supports local Whisper or cloud APIs. Use when: user provides a video URL and wants...",
        "tags": {
            "latest": "k976ymf6cj5g1a48dgpbmdvb9982grwa"
        },
        "updatedAt": 1774330489616
    }
}