use-local-whisper
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads a GGML model file for transcription from Hugging Face's official repository (https://huggingface.co/ggerganov/whisper.cpp). Hugging Face is a well-known and trusted platform for machine learning assets.
- [COMMAND_EXECUTION]: The skill integrates code updates by adding a git remote and merging a branch from the author's own repository (https://github.com/qwibitai/nanoclaw-whatsapp). This is a standard vendor-specific resource for applying skill functionality.
- [COMMAND_EXECUTION]: It performs configuration of macOS user-level services via 'launchctl' and modifies '~/Library/LaunchAgents/com.nanoclaw.plist' to ensure the local binaries (whisper-cli, ffmpeg) are correctly found in the execution path. This is necessary for the local transcription service to function correctly.
- [SAFE]: By moving transcription from a third-party cloud API to local hardware, the skill enhances user data privacy and reduces external data exposure.
Audit Metadata