faster-whisper-local-service
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONPERSISTENCEDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The generated server script uses
subprocess.check_callto invokegst-launch-1.0for audio transcoding. The arguments are passed as a list, which prevents shell injection, and the input/output paths are managed via a secure temporary directory. - [PERSISTENCE]: The deployment script creates and enables a
systemd --userservice namedopenclaw-transcribe.service. This allows the transcription server to start automatically and restart on failure, which is standard behavior for local background services. - [DYNAMIC_EXECUTION]: The
deploy.shscript dynamically generates the Python server code (transcribe-server.py) using a heredoc and writes it to the workspace before execution. This is a common pattern for provisioning standalone microservices. - [EXTERNAL_DOWNLOADS]: The skill installs the
faster-whisperpackage from PyPI with a pinned version (1.1.1). Additionally, the service downloads model weights from Hugging Face during its first execution. These downloads originate from well-known and reputable services.
Audit Metadata