Voice Chat Skill

语音对话集成技能，支持双向语音交流。使用TTS和STT实现完整的语音对话功能。

This skill appears to implement the advertised voice chat features, but there are several inconsistencies you should address before installing or running it: - Binaries and runtime: The skill metadata only requires Python, but the docs/examples show calling a Node-based OpenClaw TTS tool. If you plan to use OpenClaw TTS as shown, ensure Node and the referenced tts-tool script exist and come from a trusted source. - Environment variables / API keys: The code references ELEVENLABS_API_KEY (and mentions OpenAI) but the skill doesn't declare or require any env vars. Do not provide API keys unless you trust the maintainer and have confirmed which keys are actually needed. Consider running the skill without keys to verify local-only behavior first. - Missing files & hardcoded paths: README mentions install_deps.ps1 and launcher scripts that are not included, and a Windows-specific openclaw_path is hardcoded. Ask the publisher to clarify and remove or parameterize hardcoded paths. - Network activity: Some modes check network connectivity (urllib to baidu) and the ElevenLabs example does outbound requests. If you need to keep audio data local for privacy, avoid enabling cloud STT/TTS or supplying cloud keys. - Safe testing: Run the package in a controlled environment (sandbox or VM) first. Inspect or search for any unexpected subprocess invocations or external endpoints (the visible code shows only typical TTS/STT and benign subprocess/play commands, but the node path and example subprocess calls would execute external code if present). If you want to proceed, request that the maintainer update the skill metadata to list all required binaries (node?), required env vars (ELEVENLABS_API_KEY, OPENAI_API_KEY if used), and provide the missing install/launcher scripts or remove references to them. That will make the skill's behavior transparent and easier to judge.

Type: OpenClaw Skill Name: voice-chat-skill Version: 1.0.0 The skill bundle implements a voice chat system using speech-to-text (STT) and text-to-speech (TTS) functionalities. All network calls (Google STT, ElevenLabs TTS) and file system operations (temporary files for TTS, audio playback) are directly related to the stated purpose. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts against the AI agent in any of the analyzed files. The use of `subprocess.run` for audio playback in `voice_chat.py` is done securely by passing arguments as a list, and the `shell=True` example in `SKILL.md` is contained with controlled inputs, not indicating malicious intent.