Voice Bridge Light

提供兼容OpenAI接口的轻量级本地STT（Whisper）和TTS（Edge TTS/Piper）语音桥接HTTP服务。

This skill appears to do what it claims, but consider these precautions before installing: - Network exposure: by default the server listens on 0.0.0.0:18790. If you don't want the service reachable from other hosts, bind to localhost or restrict access with a firewall. - Edge TTS uses Microsoft online services (requires outbound network). If you need fully offline TTS, configure TTS_ENGINE=piper and provide local Piper models. - Model downloads and memory usage: faster-whisper and Piper may download large model files and use hundreds of MB of RAM. Ensure you have disk and RAM headroom. - Avoid running the service as root. If you use the provided systemd unit, change User to a non-privileged account and set WorkingDirectory appropriately. - Verify Python package sources (PyPI) and review package reputations if you require higher assurance. - If you need strong confidentiality, review access controls for the HTTP endpoint and consider adding authentication or only binding to localhost.

Type: OpenClaw Skill Name: voice-bridge-light Version: 1.0.1 The skill bundle provides a legitimate STT (Speech-to-Text) and TTS (Text-to-Speech) bridging service using Whisper, Piper, and Edge TTS. The implementation in `api_server.py` follows standard Flask patterns for audio processing and lacks any indicators of data exfiltration, command injection, or malicious intent. While the documentation suggests running the service as root via systemd, this is presented as a configuration option rather than a hidden exploit.