← Back to Skills Marketplace
334
Downloads
1
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install voiceclone
Description
Voice cloning and TTS using MiniMax API. User must provide a voice name when cloning; after success, voice_name->voice_id is written back to this skill doc f...
Usage Guidance
This skill appears to do exactly what it says: clone audio to MiniMax, create voices, synthesize speech, and update a mapping block in SKILL.md. Before installing/running: (1) ensure you set one of MINIMAX_API_KEY / MINIMAX_KEY / MINIMAX_GROUP_API_KEY (the registry metadata currently omits this requirement); (2) run the script from the skill directory (or confirm the SKILL.md path) to avoid unintended file writes; (3) inspect the included Python script if you want to be sure it accesses only the expected endpoints (it calls api.minimax.io); (4) only provide audio files and output paths you trust and avoid running with elevated privileges. If you want the registry listing fixed, ask the skill author to declare the required env var(s) in the registry metadata so it matches SKILL.md and the code.
Capability Analysis
Type: OpenClaw Skill
Name: voiceclone
Version: 1.0.1
The skill provides voice cloning and TTS capabilities using the MiniMax API (api.minimax.io). A security vulnerability exists in `scripts/minimax_voice_clone_tts.py` within the `update_skill_registry` function, which implements a 'write-back' feature to persist voice mappings into `SKILL.md`. This function lacks input sanitization for the `display_name` and `voice_id` parameters, allowing for indirect prompt injection by inserting malicious markdown instructions into the skill's documentation. While the behavior is documented and aligned with the skill's stated purpose, the self-modifying nature of the instructions poses a high-risk surface for attacking the AI agent.
Capability Assessment
Purpose & Capability
The skill name, description, SKILL.md instructions, and included Python script all align: they upload audio to MiniMax, create cloned voices, perform TTS, and maintain a mapping block in SKILL.md. However, registry metadata shown earlier lists no required environment variables/primary credential while both SKILL.md and the script require one of MINIMAX_API_KEY / MINIMAX_KEY / MINIMAX_GROUP_API_KEY. This is an inconsistency in the manifest (likely an author oversight) but the credentials themselves are appropriate for the stated purpose.
Instruction Scope
The SKILL.md and the script restrict actions to: reading a user-provided audio file, calling MiniMax endpoints, writing TTS output to the provided path, and reading/writing this skill's SKILL.md mapping block. There are no instructions to read unrelated system files or exfiltrate arbitrary data. The write-back of mappings to SKILL.md is explicit and documented (so users should expect it).
Install Mechanism
There is no registry install spec (instruction-only), and required dependency is only 'requests' per requirements.txt. That is low risk, but the presence of a runnable script plus a requirements.txt means users must install Python deps manually; there is no automated install step in the registry metadata. This is operationally inconvenient but not a security red flag.
Credentials
The script only requires a MiniMax API key (one of MINIMAX_API_KEY / MINIMAX_KEY / MINIMAX_GROUP_API_KEY) for API access — this is proportionate to voice cloning/TTS. The earlier registry summary incorrectly omitted these required env vars, which should be corrected so users know they must supply credentials before running.
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges. It writes only to its own SKILL.md mapping block and to arbitrary output paths the user supplies (e.g., --output), which is expected for a TTS tool. Users should run it from the intended skill directory to avoid accidentally updating the wrong file.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install voiceclone - After installation, invoke the skill by name or use
/voiceclone - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
- Added requirements.txt with installation instructions for Python dependencies.
- Expanded SKILL.md with a clear "Install" section and explicit Python/runtime/dependency requirements.
- Documented required and optional environment variables for authentication in the SKILL.md frontmatter and table.
- Clarified the script’s scope, file read/write behavior, and API/network interactions.
- No changes to core logic—documentation and setup improvements only.
v1.0.0
Voice cloning and TTS using MiniMax API. User
Metadata
Frequently Asked Questions
What is Mimimax Voice Clone +TTS?
Voice cloning and TTS using MiniMax API. User must provide a voice name when cloning; after success, voice_name->voice_id is written back to this skill doc f... It is an AI Agent Skill for Claude Code / OpenClaw, with 334 downloads so far.
How do I install Mimimax Voice Clone +TTS?
Run "/install voiceclone" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Mimimax Voice Clone +TTS free?
Yes, Mimimax Voice Clone +TTS is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Mimimax Voice Clone +TTS support?
Mimimax Voice Clone +TTS is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Mimimax Voice Clone +TTS?
It is built and maintained by Tan (@socketnet); the current version is v1.0.1.
More Skills