Send2tv

Push text messages, images, or audio to Huawei Smart Screen via DLNA/UPnP. Use when user wants to display something on TV or play audio/TTS on TV. Triggers:...

This skill generally does what it claims (pushes images/audio to a DLNA TV) but has several red flags you should consider before installing or running it: - Hardcoded network addresses: The SKILL.md and script hardcode TV and local IPs and an HTTP port. You should update these to match your environment or confirm they won't leak/private connect to devices you don't control. - Undeclared external tools: The script invokes node (edge-tts converter), ffmpeg (audio conversion), and fuser (to free the HTTP port) but the skill metadata declares no required binaries. Install and audit these dependencies, and ensure you trust any externally executed scripts (especially the edge-tts converter referenced in other skill folders). - Network exposure: The script starts an HTTP server bound to 0.0.0.0:8082 and serves files from /tmp. If your machine is reachable from other hosts, content could be fetched by anyone on the network; ensure firewall rules limit access to your LAN and that the port is correct. - Cross-skill file access: The TTS implementation looks for converter JS files in other skills' directories (including /root paths). That means this skill will read & execute code from other skill folders; verify those files are trustworthy and that path assumptions match your installation. - Mismatch between docs and code: The skill text suggests installing an 'edge-tts' skill; this dependency is required at runtime but not declared in metadata. Treat that as a runtime dependency. Recommended actions: review the full (non-truncated) script before running; change/remove hardcoded IPs or make them configurable; run in an isolated environment or behind a firewall; verify and install only trusted node/ffmpeg/font packages; and inspect any edge-tts converter JS before allowing this skill to execute it. If you want to proceed, prefer running it manually rather than granting it autonomous invocation until you confirm safe behavior.

Type: OpenClaw Skill Name: send2tv Version: 1.2.0 The skill is designed to push media content (text, images, audio) to a DLNA-compatible Huawei Smart Screen. It functions by rendering text to images using Pillow, optionally generating audio via a secondary TTS skill, and serving these files through a temporary local HTTP server. While the script contains hardcoded IP addresses (192.168.3.252) and uses the 'fuser' command to clear its designated port (8082), these actions are consistent with its stated purpose. The HTTP server is restricted to serving specific files from /tmp/, and subprocess calls are handled safely without shell injection risks.