Is skill/parakeet-local-asr safe?
Yes. skill/parakeet-local-asr is safe to install. Oathe's behavioral security audit gave the parakeet-local-asr skill by skill a trust score of 85/100 with 4 findings (1 high).
https://clawhub.ai/skill/parakeet-local-asr
Is skill/parakeet-local-asr safe to install?
This skill appears to legitimately set up NVIDIA Parakeet ASR for local speech-to-text processing. However, it downloads and executes code from an external GitHub repository without showing what that code does, creating a security risk. No malicious behavior was detected during installation and all security canaries remained intact.
What security issues were found in skill/parakeet-local-asr?
Category Scores
Findings (4)
HIGH External Code Download and Execution -40 ▶
The bootstrap.sh script downloads code from an external GitHub repository (https://github.com/rundax/parakeet-asr.git) and executes a setup.sh script whose contents are not visible in this audit. This creates a security risk as the external code could be malicious or compromised.
LOW Potential Data Access Risk -10 ▶
While no exfiltration was detected, the external setup.sh script could potentially access sensitive data since its contents are unknown.
LOW External Network Connections -15 ▶
The skill makes connections to external services during installation, though these appear legitimate.
MEDIUM Supply Chain Risk -30 ▶
The skill creates a dependency on external code that could be modified maliciously in the future, creating ongoing supply chain risk.
Should I install skill/parakeet-local-asr?
Oathe's verdict for skill/parakeet-local-asr is SAFE with a trust score of 85/100. Recommendation: Install with caution.