Smart Speak Multilingual TTS (Jaskies)

Chuyển đổi văn bản đa ngôn ngữ (Việt - Hoa - Anh) thành giọng nói chuẩn xác. Tự động xử lý Pinyin và ghép nối âm thanh chất lượng cao. Yêu cầu cài đặt edge-t...

Things to consider before installing or using this skill: - Feature mismatch: SKILL.md promises automatic Pinyin conversion and auto-segmentation, but the included script does not implement either. You must supply pre-segmented JSON and already-converted text; do not assume the skill will transcribe/convert Pinyin for you. - Hardcoded paths: The script calls edge-tts at /home/jackie_chen_phong/.local/bin/edge-tts. That path is user-specific and likely incorrect on your machine. Edit the script to call edge-tts from PATH (e.g., just 'edge-tts') or update the path to your installation. The sample output path also references the same username — replace with your own path. - Confirm binaries and sources: The skill relies on edge-tts (Python package/CLI) and ffmpeg. Install them from trusted sources (official apt repos, pip from PyPI) and verify the edge-tts CLI is the one you expect. Because the script invokes local executables, a compromised or replaced binary on your system could run arbitrary code. - Input handling: The script uses subprocess.run with argument lists (not a shell string), which reduces command-injection risk, but it will execute whatever 'edge-tts' and 'ffmpeg' do with your text. Avoid feeding untrusted, attacker-controlled segments into the script without review. - If you need the advertised automatic Pinyin handling or language detection, request or implement that functionality (preprocessing step or a revised script). If the author provides an updated script or documentation that demonstrates those features, reassess. If you want, I can (a) suggest a safe one-line change to the script to use the edge-tts binary on PATH, (b) scan the repo for other missing features, or (c help implement the promised Pinyin-to-Hanzi step.

Type: OpenClaw Skill Name: smart-speak-jaskies Version: 1.0.0 The skill provides multi-lingual text-to-speech functionality using the legitimate `edge-tts` library and `ffmpeg`. While it contains hardcoded absolute paths specific to a local user environment (`/home/jackie_chen_phong/`) in both `SKILL.md` and `scripts/smart_speak.py`, and requests `sudo` for dependency installation, these appear to be artifacts of the developer's environment rather than indicators of malice. The Python script safely handles external process execution using `subprocess.run` with argument lists, effectively mitigating shell injection risks.