senseaudio-conversation-rehearsal

Use when a user wants to rehearse a high-pressure conversation such as a performance review, reporting meeting, promotion defense, difficult manager conversa...

What to consider before installing or running this skill: - Declared vs actual requirements: The registry lists no credentials, but the skill expects SENSEAUDIO_API_KEY and may attempt to find a SENSEAUDIO_PLATFORM_TOKEN and Feishu credentials at runtime. Treat the package as needing secrets unless you audit and disable those flows. - Chrome token access: The included code can run osascript/AppleScript to execute JavaScript in Chrome tabs and read localStorage/sessionStorage to extract tokens. This is a sensitive operation — only run it if you understand and consent to the skill reading your browser session. If you won't supply tokens explicitly, disable or remove the Chrome-resolution paths. - Voice cloning flow: The package includes an automated 'clone' path that will upload audio to a remote platform if you enable create-clone. Do not enable clone creation unless you control the sample and have explicit consent from the person whose voice is used. - Feishu integration: The send-to-Feishu flow will require Feishu app credentials and may upload and send audio. The skill does not declare these requirements in metadata — review and control any Feishu app_id/app_secret used. - Mitigations: (1) Prefer running scripts with explicit --api-key and avoid using the platform-token/browser-token automation. (2) Run in an isolated environment (VM/container) and inspect network calls with e.g., a proxy if you are unsure. (3) If you don't need cloning, avoid the create-clone/authorized_clone paths or remove scripts senseaudio_clone_workspace.py and senseaudio_platform_token.py. (4) Audit any code that loads other skill modules (e.g., Feishu helper) to ensure it doesn't escalate privileges. (5) If you don't trust the remote AudioClaw/SenseAudio endpoints, do not provide SENSEAUDIO_API_KEY and stick to proxy_voice mode. If you want, I can point out the exact lines that perform Chrome localStorage extraction and where tokens/paths are referenced so you can remove or sandbox them.

Type: OpenClaw Skill Name: senseaudio-conversation-rehearsal Version: 1.0.2 The skill bundle contains high-risk scripts (senseaudio_platform_token.py and senseaudio_clone_workspace.py) that use AppleScript to execute arbitrary JavaScript within Google Chrome. This capability is used to scrape session tokens from localStorage/sessionStorage and automate actions (like voice cloning) in a logged-in browser session on senseaudio.cn. While these features are documented as 'experimental workspace automation,' the use of browser-level automation to extract credentials and hijack active sessions is a technique commonly found in credential-stealing malware and represents a significant security risk to the user's platform account.