SenseAudio Voice CN

SenseAudio Voice - 语音合成 (TTS) + 语音识别 (ASR)，支持语言自动切换

What to consider before installing: - The skill will contact https://api.senseaudio.cn for both TTS and ASR and requires a SENSE_API_KEY. The registry entry did not declare this env var — make sure you provide the API key intentionally and understand SenseAudio's account/verification requirements. - The scripts try to read ~/.openclaw/openclaw.json and also a hard-coded path ~/.openclaw/agents/kids-study/openclaw.json to find the API key. Confirm you are comfortable with the skill reading those local config files; if you keep other secrets in those files, review them first. - The code appears to perform only expected operations (HTTP calls to SenseAudio and using edge-tts locally), write audio files to a workspace/audio/ directory, and play audio via local players. There is no obfuscated or clearly malicious code, but the metadata mismatch and hard-coded agent path are red flags. - Recommended actions: inspect the scripts locally, verify or supply only the SENSE_API_KEY (prefer environment variable rather than committing secrets to config files), verify the skill source/author (no homepage provided), and only install if you trust SenseAudio and accept that the skill will access the specified config files and network endpoints. Confidence is medium — the code is coherent with the stated functionality, but the undeclared credential requirement and probing of additional config paths are concrete inconsistencies that warrant caution.

Type: OpenClaw Skill Name: senseaudio-voice-cn Version: 1.0.0 The skill bundle provides legitimate Text-to-Speech (TTS) and Automatic Speech Recognition (ASR) functionality using SenseAudio and Edge TTS services. The Python scripts (tts.py, asr.py) correctly handle API keys from the environment or local configuration files and interact with the specified API endpoints (api.senseaudio.cn). Audio playback is implemented safely using subprocess.run with list-based arguments, avoiding shell injection vulnerabilities, and the setup script performs standard dependency and configuration checks without suspicious side effects.