Skip to main content

whisper-mlx-local

Transcribes voice messages for Telegram and WhatsApp locally on Apple Silicon, ensuring privacy and zero costs.

Install this skill

or
88/100

Security score

The whisper-mlx-local skill was audited on Feb 9, 2026 and we found 4 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 114

Curl to non-GitHub URL

SourceSKILL.md
114curl -X POST http://localhost:8787/transcribe -F "[email protected]"
medium line 64

Access to hidden dotfiles in home directory

SourceSKILL.md
64Add this to your `~/.openclaw/openclaw.json`:
low line 75

Access to hidden dotfiles in home directory

SourceSKILL.md
75"command": "~/.openclaw/workspace/skills/local-whisper/scripts/transcribe.sh",
low line 114

External URL reference

SourceSKILL.md
114curl -X POST http://localhost:8787/transcribe -F "[email protected]"
Scanned on Feb 9, 2026
View Security Dashboard