SenseAudio Podcast Generator

双主播播客生成器 - 输入话题自动生成播客音频，支持LLM智能生成脚本、克隆音色、文字生成音色、自定义语速语调、多种音色可选

Things to consider before installing: - Metadata mismatch: The registry entry listed no required env or config paths, but SKILL.md and the shipped scripts require FFmpeg and SENSEAUDIO_API_KEY and also read your ~/.openclaw/openclaw.json for gateway tokens and Feishu app credentials. Expect the code to access that file and use any credentials inside. - Sensitive data access: The skill will try to read appId/appSecret and gateway tokens from your OpenClaw config and use them to upload audio to Feishu and send messages via the local gateway or 'openclaw' CLI. If you keep other service credentials in openclaw.json, those could be read at runtime. Only install if you trust the author and are comfortable with the skill accessing that config file. - Tests and runtime require openclaw.json: The included tests assert that openclaw.json exists and contains SENSEAUDIO_API_KEY, so installing/running tests may fail or leak info if you don't have a safe test config. The code also contains hard-coded demo folder tokens and project paths—inspect and remove them if necessary. - Mitigations and next steps: - Inspect ~/.openclaw/openclaw.json yourself before running; remove or move unrelated secrets you don't want the skill to see. - Prefer providing needed tokens explicitly (SENSEAUDIO_API_KEY and an upload token) rather than leaving app secrets in a global config file; ask the skill author to accept explicit credentials via environment variables or secure prompts. - If you need to run it, run inside a sandboxed account or VM that does not contain other sensitive OpenClaw credentials. - Ask the author to update registry metadata to list required config paths and credentials (openclaw.json, Feishu app secrets, gateway token) so the permission model is transparent. If you are not comfortable with a skill reading local agent configuration and messaging credentials, do not install or run it until the author provides a version that requests only the minimal, explicit credentials it needs.

Type: OpenClaw Skill Name: senseaudio-podcast-generator Version: 1.0.4 The skill is a legitimate podcast generation tool that uses a local Flask backend and the SenseAudio API. While it accesses the OpenClaw configuration file (~/.openclaw/openclaw.json) to retrieve API keys and Feishu credentials, and uses subprocess calls to manage services, these actions are strictly aligned with its stated functionality of generating audio and uploading it to IM channels. The presence of hardcoded absolute paths (e.g., /home/wang/桌面/...) indicates poor packaging from a local development environment rather than malicious intent.