Text To Podcast

将文本转换为播客音频（使用 TTS）

What to check before installing: - The skill needs your OpenAI API key (OPENAI_API_KEY). Only provide a key you control and are comfortable using for TTS requests. If you use a high-privilege key, consider creating a scoped/limited key if your account supports it. - install.sh will pip-install the 'openai' and 'python-dotenv' packages into the system Python environment. If you prefer isolation, run it inside a virtualenv or container. - install.sh creates a .env file with a placeholder in the skill folder and an 'output' directory. The uninstall script can remove these, but you should inspect and, if desired, delete the .env (it contains your key) after uninstalling. - The package advertises a 'text-to-podcast' CLI but install.sh does not create a named executable or PATH entry; you may need to run the Python script directly (python3 source/podcast_generator.py ...) or create your own wrapper. Confirm how the platform exposes commands before relying on the SKILL.md examples. - Review source/podcast_generator.py yourself; it appears to only call OpenAI's API and do local file I/O (no hidden endpoints). If you want higher assurance, run it in an isolated environment and monitor network calls to confirm they go only to OpenAI. - The top-level registry metadata contradicts the embedded files about required env vars; ask the publisher or maintainer to correct this before use. If these issues are acceptable and you run the install in an isolated environment, the skill appears internally consistent with its stated purpose. If you need definitive assurance, request corrected registry metadata and a clear CLI installation step from the maintainer.

Type: OpenClaw Skill Name: text-to-podcast Version: 1.0.0 The skill is a legitimate text-to-speech tool designed to convert text files into MP3 podcasts using the OpenAI TTS API. The installation script (install.sh) and Python source code (podcast_generator.py) perform standard operations such as dependency installation via pip, environment variable management for API keys, and file I/O, with no evidence of malicious behavior, data exfiltration, or prompt injection.