mmEasyVoice

Simple text-to-speech skill using MiniMax Voice API. Converts text to audio with customizable voice selection. Use for generating speech audio from text.

Key things to consider before installing or running mmEasyVoice: - Missing declared credential: The registry metadata omits required environment variables, but SKILL.md and the code require MINIMAX_VOICE_API_KEY. Expect to provide an API key (a secret). Do not provide keys you wouldn’t mind being used by this code; verify the key’s scope and permissions first. - Data upload & privacy: Voice cloning and async tasks upload audio/text to the MiniMax service. Do not upload sensitive or private voice recordings you cannot afford to have retained or used to impersonate someone. Ask the service owner (or inspect scripts/utils) what MINIMAX_API_BASE is, what endpoints are used, and the vendor’s retention/privacy policy. - Verify endpoints and origin: The code refers to MiniMax platform endpoints (e.g., documentation URLs in the source). Because source/homepage is 'unknown', inspect scripts/utils to confirm MINIMAX_API_BASE resolves to an official vendor domain you trust before running. - Install & sandboxing: There is no automatic install step; you must pip install requirements.txt and install FFmpeg yourself. Run the tool in a sandbox or isolated environment first so you can monitor network requests, file writes (audio/tmp directories), and ensure it behaves as expected. - Review code areas of interest: Check scripts/utils and any HTTP request wrappers (make_request, get_headers, parse_response) to confirm headers, endpoints, and any logging of secrets. Confirm that API key is only used for the intended API and not exfiltrated elsewhere. - If you are unsure: Do not run it with production or highly privileged API keys. Ask the publisher for a canonical homepage, package signing information, or a source repo so you can verify provenance. If you need help checking the specific utils/make_request implementation, provide that file and I can review it for unexpected network targets or exfiltration behavior.

Type: OpenClaw Skill Name: mm-easy-voice Version: 1.0.2 The mm-easy-voice skill bundle is a legitimate and well-structured text-to-speech tool designed to interface with the MiniMax Voice API. It provides comprehensive functionality for text synthesis, voice cloning, voice design, and audio post-processing using FFmpeg. The code (mmvoice.py and the scripts/ directory) follows standard API integration patterns, and the documentation (SKILL.md and reference files) contains clear, non-malicious instructions for the AI agent. No evidence of data exfiltration, malicious execution, or prompt injection was found.