41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill mostly matches its stated purpose (local Whisper ASR) but its install/run process pulls and executes code from a remote repository and therefore contradicts its 

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1771839187199,
        "_id": "k97em81ray2q2ffcrdgqd2en8d81phpa",
        "changelog": "Whisper Local API 1.0.0 – Initial Release\n\n- Launches a secure, 100% offline OpenAI-compatible Whisper ASR endpoint for OpenClaw.\n- Utilizes faster-whisper with the large-v3-turbo model for high-accuracy, privacy-first speech-to-text.\n- Lightweight; low RAM usage (~400-500MB) suitable for edge and VPS environments.\n- Built-in local API for OpenAI Whisper-compatible `\/v1\/audio\/transcriptions` calls, no cloud required.\n- Includes simple scripts for install, startup, health checking, and smoke testing with audio files.",
        "changelogSource": "auto",
        "createdAt": 1771839187199,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Roman Slysh",
        "handle": "hantok",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/1752322?v=4",
        "kind": "user",
        "linkedUserId": "kn7ftw5qxbnv83q4n1q00cmj2d81dq9z"
    },
    "ownerHandle": "hantok",
    "skill": {
        "_creationTime": 1771839187199,
        "_id": "kd75t2qw1sdg41sqz78v868pqs81qjr8",
        "badges": [],
        "createdAt": 1771839187199,
        "displayName": "Whisper Local Api",
        "latestVersionId": "k97em81ray2q2ffcrdgqd2en8d81phpa",
        "ownerUserId": "kn7ftw5qxbnv83q4n1q00cmj2d81dq9z",
        "slug": "whisper-local-api",
        "stats": {
            "comments": 0,
            "downloads": 354,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Secure, offline, OpenAI-compatible local Whisper ASR endpoint for OpenClaw. Features faster-whisper (large-v3-turbo), built-in privacy with no cloud telemetr...",
        "tags": {
            "latest": "k97em81ray2q2ffcrdgqd2en8d81phpa"
        },
        "updatedAt": 1774326537546
    }
}