功能描述

Enables local voice chat by embedding Hotbutter relay server and PWA, providing speech-to-text and text-to-speech via a secure, self-hosted connection.

使用说明 (SKILL.md)

Hotbutter Voice Skill (Hosted Relay)

Name: hotbutter voice chat
Author: michael-stajer

This skill routes data through hotbutter.ai. Voice transcripts and agent responses are transmitted through the hosted relay server at wss://hotbutter.ai. This is a convenience skill — not a private or local-only solution.

For a fully local alternative where no data leaves your machine, see hotbutter-os.

For updates, follow @DnuLkjkjh.

Privacy & Data Flow

Data that transits through hotbutter.ai:

Transcribed speech text (from browser speech-to-text)
Agent response text (stdout from your local openclaw binary)

Warning: If your agent prints sensitive information (secrets, credentials, private data), that output will be sent through the relay. Avoid running agents that output secrets, or use --relay-url to point to a relay you control.

Data that stays local:

Raw audio (processed in the browser, never transmitted)
The openclaw binary execution (runs on your machine)
Config file (~/.hotbutter)

Required Dependencies

openclaw CLI — must be installed and on your PATH

How It Works

This skill connects via WebSocket to wss://hotbutter.ai
A pairing code and URL (https://hotbutter.ai/app?code=XXXXXX) are printed
Open the URL in your browser to start a voice session
Browser speech-to-text converts your voice to text, sent through the relay to this skill
This skill executes openclaw agent --session-id \x3Cid> -m \x3Ctext> on your machine
The agent's text response is sent back through the relay and spoken via browser TTS

Usage

# Start (connects to hotbutter.ai by default)
voice-bridge start

# Use your own relay for privacy
voice-bridge start --relay-url wss://your-relay.example.com

# Custom agent display name
voice-bridge start --agent-name "My Agent"

Configuration

Option	Default	Description
`--relay-url`	`wss://hotbutter.ai`	Relay WebSocket URL. Change this to use your own relay.
`--agent-name`	`Agent`	Display name shown in the voice client

First Run

On first run, the skill will prompt for an optional email (stored locally in ~/.hotbutter). Subsequent runs connect immediately.

安全使用建议

This skill intentionally routes transcribed speech and the agent's stdout through the hosted relay at wss://hotbutter.ai; that behavior is explicit in SKILL.md and the code. Only install/run it if you are comfortable that agent output may pass through that server. If you need privacy, use the documented --relay-url option to point to a relay you control or use the fully-local hotbutter-os project. Be cautious about following the index.html curl | tar example — that would download code from hotbutter.ai; verify the source before running. Finally, audit what your local 'openclaw' agent prints (it may include secrets), and avoid running agents that output sensitive data while this bridge is active.

功能分析

Type: OpenClaw Skill Name: hotbutter Version: 1.0.6 The skill is classified as suspicious primarily due to the potential for Remote Code Execution (RCE) via the `openclaw` binary. The `bin/voice-bridge.js` and `lib/agent-bridge.js` files execute `openclaw agent -m <text>` where `<text>` is user-controlled input received from the `hotbutter.ai` relay. Although `child_process.execFile` is used (which mitigates some shell injection risks), it does not prevent command injection if the `openclaw` binary itself is vulnerable to interpreting its `-m` argument as a command. Additionally, the skill explicitly relays all voice transcripts and agent responses through `wss://hotbutter.ai`, as stated in `SKILL.md` and `package.json`, which, while transparently declared, presents a significant privacy concern, especially given the warning that sensitive agent output will be transmitted.

能力评估

✓ Purpose & Capability

Name/description claim a hosted relay voice bridge. The package only requires the local 'openclaw' CLI and includes code that opens a WebSocket to a relay and invokes 'openclaw agent' — these are exactly what the feature needs.

✓ Instruction Scope

SKILL.md and the JS code consistently state that transcribed speech and agent stdout are sent via the relay. The runtime does not read unrelated files or environment variables; it only stores a small config at ~/.hotbutter and prompts for an optional email. The agent invocation uses execFile (no shell) and captures stdout as the message to relay.

ℹ Install Mechanism

There is no formal install spec in the registry (lowest-risk), but index.html contains an example curl | tar command that would download code from hotbutter.ai. That external download is outside the registry install metadata — if users follow it they should verify the remote host. The packaged code itself has no obfuscated downloads.

✓ Credentials

The skill requests no environment variables or external credentials and only writes a local config (~/.hotbutter). That matches its functionality. No unrelated credentials or config paths are requested.

✓ Persistence & Privilege

always:false and user-invocable:true. The skill only stores an optional email locally and does not alter other skills or system-wide agent settings.

版本历史

v1.0.6

Initial public release of the Hotbutter voice chat skill (hosted relay): - Connects local agents to voice chat via the hotbutter.ai relay. - Transcribes speech in the browser and sends only text (not audio) through the relay. - Runs the openclaw agent CLI locally in response to each message. - Configurable relay URL and agent display name for privacy/personalization. - On first run, optionally collects email for setup; all data except transcripts and responses stays local.

v1.0.4

- Updated documentation to clarify that this skill routes all transcripts and agent responses through the hotbutter.ai relay server by default. - Added detailed privacy and data flow section, highlighting what data is transmitted, what remains local, and privacy warnings. - Provided clear directions for using a self-hosted relay or switching to the fully self-hosted solution for increased privacy. - Improved examples, terminology, and configuration guidance for easier setup and understanding. - No code changes in this version; changes are documentation-only.

v1.0.3

- Updated documentation to clarify that this skill routes all transcripts and agent responses through the hotbutter.ai relay server by default. - Added detailed privacy and data flow section, highlighting what data is transmitted, what remains local, and privacy warnings. - Provided clear directions for using a self-hosted relay or switching to the fully self-hosted solution for increased privacy. - Improved examples, terminology, and configuration guidance for easier setup and understanding. - No code changes in this version; changes are documentation-only.

v1.0.2

- Major change: switched from an embedded local relay/PWA to connecting with the hosted relay at hotbutter.ai. - Removed all local relay server and PWA files. - Added basic UI file for updated workflow. - Now supports configuration via welcome prompt on first run, saving config in `~/.hotbutter`. - New `--relay-url` option allows connecting to a custom relay server. - Documentation updated to reflect the new cloud-based connection and setup flow

v1.0.1

- Added PWA icons for improved Progressive Web App support. - Updated documentation to clarify that the skill requires the openclaw CLI binary installed locally and on PATH. - Detailed the skill's use of the openclaw CLI for agent responses, including command info, timeouts, and fallback behavior if the binary is not found.

v1.0.0

Initial release of the Hotbutter voice chat skill. Adds realtime voice via web pwa to your agent. Access on your computer or phone (via vpn/tailscale). See demo at https://hotbutter.ai - Embeds local relay server and PWA for secure, self-hosted voice chat. - Terminal provides a 6-digit pairing code and one-click URL to start sessions. - Real-time speech-to-text (STT) in browser; messages relayed to agent and back. - Agent responses delivered by browser text-to-speech (TTS). - Supports configuration of server port and agent display name via CLI.

元数据

Slug hotbutter

版本 1.0.6

许可证 —

累计安装 0

当前安装数 0

历史版本数 6

常见问题

hotbutter voice chat 是什么？

Enables local voice chat by embedding Hotbutter relay server and PWA, providing speech-to-text and text-to-speech via a secure, self-hosted connection. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 490 次。

如何安装 hotbutter voice chat？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install hotbutter」即可一键安装，无需额外配置。

hotbutter voice chat 是免费的吗？

是的，hotbutter voice chat 完全免费（开源免费），可自由下载、安装和使用。

hotbutter voice chat 支持哪些平台？

hotbutter voice chat 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 hotbutter voice chat？

由 Michael Stajer（@michael-stajer）开发并维护，当前版本 v1.0.6。

hotbutter voice chat