Skills/ClawHub/video-transcript

video-transcript@1.0.5

VERIFIED

Publisher claims: "想把视频里的台词/课程内容变成文字？视频文案提取（video transcript / 语音转文字 / 字幕提取 / video to text）从本地视频文件中提取语音文案与字幕，跨平台支持 macOS/Windows/Linux，完全离线运行——视频再大也不怕，用 whisper AI 语音模型做高精度识别，支持多语言字幕提取和 OCR 文字识别，自动输出带时间戳的 SRT 字幕（可直接导入剪映/PR/达芬奇/FCPX）与无时间戳 TXT 纯文本（方便文案整理、口播稿提取与二次创作），转录后还可顺手做文案润色。当用户说「提取这个视频的字幕」「帮我把视频转成文字」「如何提取视频文案」「我想导出视频台词」时触发。Use when you need to transcribe a local video file to text or subtitles. 触发词：视频文案提取、提取字幕、语音转文字、视频转文字、提取文案、转录。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher guipi888 · joined 15 days agoInstalls 490Last detonated 14d ago
$clawhub install video-transcript
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-23 and scored it 89/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

HIGH
Privileged sudo commandSKILL.md:67 · Privileged sudo command — agent may execute with elevated privilegesFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05

No other findings across 325 lines in 3 files.

Cost to the agent

Not measured yet; benchmarks are collected with each run since November 5, 2026. See the MCP server benchmarks.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.