← Back to Skills Marketplace
158
Downloads
0
Stars
0
Active Installs
4
Versions
Install in OpenClaw
/install yapp
Description
Receive and engage with transcribed voice memos from Yapp, a voice journaling app, capturing raw, unedited speech-to-text recordings with metadata.
Usage Guidance
This skill asks you to give and let it store a Yapp API key and then continuously poll an endpoint hosted on yyy-production.up.railway.app for transcripts. Before installing: 1) Verify the skill's provenance and confirm the endpoint is an official Yapp service (ask the author for documentation or an official domain). 2) Request that the skill metadata be updated to declare the required credential (so it's clear what will be stored). 3) Ask where and how the API key and transcripts will be stored, how long data is retained, and whether transcripts or extracted facts are sent anywhere else. 4) If you proceed, limit the token's permissions, treat it as sensitive (rotate it if you stop using the skill), and consider disabling autonomous invocation or the skill when not needed to avoid continuous access. If you cannot confirm the endpoint or author identity, do not provide your API key.
Capability Analysis
Type: OpenClaw Skill
Name: yapp
Version: 1.0.3
The skill requests a 'Yapp' API key and communicates with a generic-looking endpoint (yyy-production.up.railway.app) to fetch voice transcripts. While the instructions in SKILL.md align with the stated purpose of a journaling integration, the requirement to poll the external service on every heartbeat and the use of a placeholder-style domain for a production service are potential indicators of data harvesting or excessive data exposure.
Capability Assessment
Purpose & Capability
The SKILL.md requires the user's Yapp API key (starts with "yapp_") and instructs saving it to config so the agent can poll an API for transcripts. However, the registry metadata lists no required credentials or primaryEnv. The endpoint used (yyy-production.up.railway.app) is not an obvious official Yapp domain and there is no homepage or provenance information. Requesting an API key is plausible for the described purpose, but the absence of that requirement in metadata and the unknown host are inconsistent and suspicious.
Instruction Scope
Runtime instructions direct the agent to poll GET https://yyy-production.up.railway.app/api/transcripts/new?since=<ISO_TIMESTAMP> with a Bearer token on every heartbeat and to 'store any facts, preferences, or commitments' from transcripts. The doc also contradicts itself (it tells the agent to 'notify the user with a brief summary' but later says 'Don't summarize unless asked'). The skill tells the agent to persist the API key to its config (unspecified location/retention). Polling on every heartbeat plus persistent storage of a bearer key and storing user statements raises privacy and data-retention concerns.
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so it does not write new binaries or download archives. That reduces some risk. However, the network endpoint used for fetching transcripts is a railway.app host (a 3rd-party hosting platform) rather than a clear official Yapp domain, which reduces provenance confidence.
Credentials
The SKILL.md expects a Yapp API key and persistent storage, but the registry lists no required env vars or primary credential. Asking for a single service token is proportionate to the described function, but the skill's metadata failing to declare that credential and instructing persistent storage of the secret is a mismatch and a red flag. No other environment variables are requested.
Persistence & Privilege
The skill is not 'always: true' and is user-invocable (normal). However, it explicitly instructs saving the API key to config and polling on every heartbeat, which implies ongoing/continuous access if enabled. Persistent credentials plus autonomous invocation increase the potential blast radius — consider this when deciding whether to enable it long-term.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install yapp - After installation, invoke the skill by name or use
/yapp - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.3
**Yapp 1.0.3 Change Highlights**
- Revised the setup process: now, simply save the Yapp API key—no longer need to give special values back to the user.
- Detailed instructions for automatically polling and fetching new voice recordings using the Yapp API.
- Added guidance to check for new recordings on every heartbeat and also in response to user requests.
- Clarified expected handling of recordings: focus on processing, summarizing, and engagement—don’t echo back transcripts.
- Updated do’s and don’ts for responding to new recordings and transcription imperfections.
v1.0.2
- Updated Yapp setup flow: users now copy and paste a webhook URL and bearer token directly into the Yapp app.
- Removed automatic registration HTTP call; manual setup by the user is now required.
- Added clear, copy-friendly instructions for sharing the webhook URL and bearer token with Yapp.
- No changes to how voice memos are received or processed.
v1.0.1
- Changed setup process: replaced local setup script with in-app API registration instructions using a POST request.
- Updated SKILL.md to reflect the new registration flow, including API endpoint, request headers, and response handling instructions.
- Removed obsolete setup script: scripts/register.py.
v1.0.0
- Initial release of the yapp skill with voice recording integration.
- Setup instructions provided for connecting your Yapp account using an API key.
- Skill processes messages containing transcribed voice memos with metadata, transcription notes, and speaker labels.
- Guidance included for engaging with raw, unpolished user recordings and handling diarization imperfections.
- Recommends natural engagement, follow-up questions, and thematic reflection without unnecessary summarization.
Metadata
Frequently Asked Questions
What is yapp?
Receive and engage with transcribed voice memos from Yapp, a voice journaling app, capturing raw, unedited speech-to-text recordings with metadata. It is an AI Agent Skill for Claude Code / OpenClaw, with 158 downloads so far.
How do I install yapp?
Run "/install yapp" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is yapp free?
Yes, yapp is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does yapp support?
yapp is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created yapp?
It is built and maintained by EaRu723 (@earu723); the current version is v1.0.3.
More Skills