qwen-asr

SUSPICIOUS. The skill's capability matches its ASR purpose, but it routes user audio to a third-party hosted demo endpoint that is not clearly the official Qwen production API. No credential theft or overt malware is present, yet the remote data flow, mutable BASE_URL, and logging of uploaded audio URL/transcript make it a medium-risk privacy and trust concern rather than benign local transcription.