Mic Recorder

麦克风录音并发送音频到飞书。涵盖语音和背景音。

This skill will record microphone audio and send the resulting file to a Feishu channel. Before installing/using it: - Understand it will capture sensitive audio and transmit it externally — confirm you trust the Feishu destination and know which account/channel will receive files. - The SKILL.md assumes an Automator app (~/.openclaw/tools/RecordMic.app) and uses ffmpeg and the macOS open command, but the skill metadata declares no required binaries. Make sure ffmpeg is installed from a trusted source and that RecordMic.app’s workflow is exactly what you expect before granting microphone access. - Verify where credentials for Feishu come from (platform-provided 'message' API or stored tokens). If the skill requires Feishu API keys, ask the author for explicit required env vars and minimal-scope credentials. - Check the RecordMic.app contents (document.wflow) before running to ensure it only executes the expected ffmpeg and copy commands and doesn't run arbitrary code. - If you need a safer setup, request the author to: (1) declare required binaries (ffmpeg, open), (2) list required credentials or confirm use of platform-managed messaging, and (3) provide a checksum or source for RecordMic.app or an alternative install script so you can inspect what will run. I rate this suspicious rather than malicious because the behavior matches the stated purpose but important operational details and dependencies are omitted, and the skill handles highly sensitive data (microphone audio) that will be transmitted externally.

Type: OpenClaw Skill Name: mic-recorder Version: 1.0.0 The skill implements microphone recording and data exfiltration to an external platform (Feishu), which are high-risk capabilities. It relies on executing a local Automator application (~/.openclaw/tools/RecordMic.app) via shell commands (subprocess.run) and includes specific instructions for the AI agent to move and upload audio files. While these actions align with the stated purpose, the inherent risk of unauthorized audio surveillance and remote transmission justifies a suspicious classification.