ListenHub

Turn ideas into podcasts, explainer videos, voice narration, and AI images via ListenHub. Use when the user wants to "make a podcast", "create an explainer v...

Review carefully before installing. Avoid submitting sensitive text, private URLs, confidential prompts, or reference images unless you are comfortable sending them to the disclosed external services. Preinstall curl and jq yourself, set LISTENHUB_API_KEY through OpenClaw environment configuration rather than letting scripts write shell rc files, and treat the image script as higher risk until its Labnana/Marswave provider use, auto-install behavior, and credential persistence are corrected.

Type: OpenClaw Skill Name: listenhub-ai Version: 0.6.0 The skill is classified as suspicious due to the `generate-image.sh` script's capability to auto-install dependencies (`jq`, `curl`) using system package managers (e.g., `sudo apt-get install`) and to write configuration (API key, output directory) directly into the user's shell RC files (`~/.zshrc`, `~/.bashrc`). While these actions are intended for user convenience and configuration, they represent high-risk capabilities that could be exploited if the script or its inputs were compromised, potentially leading to unauthorized command execution or persistence. There is no clear evidence of intentional malicious behavior like data exfiltration or backdoors, but the broad permissions requested for auto-installation and direct modification of shell configuration files elevate the risk beyond benign.