Is carlulsoe/parakeet-stt safe?
Yes. carlulsoe/parakeet-stt is safe to install. Oathe's behavioral security audit gave the parakeet-stt skill by carlulsoe a trust score of 98/100 with 2 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/carlulsoe/parakeet-stt
Is carlulsoe/parakeet-stt safe to install?
This is a documentation-only skill that provides instructions for setting up NVIDIA Parakeet TDT speech-to-text service locally. The skill itself contains no executable code and exhibits no malicious behavior, only referencing an external repository for the actual implementation.
What security issues were found in carlulsoe/parakeet-stt?
Category Scores
Findings (2)
LOW External Repository Dependency -10 ▶
The skill instructs users to clone and execute code from an external GitHub repository (groxaxo/parakeet-tdt-0.6b-v3-fastapi-openai). While this is transparently documented and expected for this type of integration, it does introduce dependency on external code that could potentially be compromised.
INFO Legitimate External Dependency -5 ▶
The skill serves as documentation for setting up a local speech-to-text service and relies on an external implementation repository. This is normal behavior for integration skills but creates a dependency chain.
Should I install carlulsoe/parakeet-stt?
Oathe's verdict for carlulsoe/parakeet-stt is SAFE with a trust score of 98/100. Recommendation: Install.