Voice UI

Self-evolving voice assistant UI. Talk to your AI, ask it to improve itself, and watch the code update in real-time.

Key points to consider before installing: - Secret exposure: The server exposes OPENAI_API_KEY via GET /api/key and sets Access-Control-Allow-Origin: *. That means webpages on other origins can read your API key from the running local server — remove or restrict this endpoint before use. A safer design is to keep the API key on the server side and perform OpenAI requests from server endpoints only. - Manifest mismatch: The registry claims no required env vars, but SKILL.md, start.sh, and server.cjs expect OPENAI_API_KEY and a local OpenClaw CLI. Treat the manifest as incomplete and assume the skill needs those secrets and a local OpenClaw binary. - Hardcoded paths: server.cjs and CONTEXT.md reference /Users/yuki/... and a specific OpenClaw binary path. Edit the code to make the OpenClaw path and workspace configurable (do not run code that assumes another user's home). - Self‑editing & auto‑commit: The skill is explicitly designed to let an agent modify local files and auto‑git commit changes. That is powerful but dangerous — only run it in a directory you trust, and review diffs before pushes. Consider running inside a disposable VM/container or a throwaway git repo until you verify behavior. - What to change before running: restrict CORS, remove or lock down /api/key, make OPENCLAW path and workspace configurable via environment variables, and ensure start.sh does not silently cat your ~/.openclaw file if you don't want that. Audit the OpenClaw 'voice' agent configuration and permissions (what tools it can invoke, whether it can run shell commands or push to remote repos). - How to test safely: run in an isolated container or ephemeral user account without network access to sensitive remotes; start the server without an API key first to see error behavior; inspect console logs; and run git status/diff before allowing any auto-commit/push. Given the mismatches and the exposed API key behavior, treat this skill as suspicious until you harden it and confirm it only performs actions you approve.

Type: OpenClaw Skill Name: voice-ui Version: 1.0.0 This skill is classified as suspicious due to its explicit granting of high-risk capabilities to the AI agent. The `CONTEXT.md` and `server.cjs` files contain direct instructions for the AI agent to modify local files (e.g., `/Users/yuki/.openclaw/workspace/voice-ui/index.html`) and execute shell commands (`git add -A && git commit`). While these actions are central to the skill's stated 'self-evolving' purpose, they represent significant file system write and arbitrary command execution capabilities that could be exploited through prompt injection against the agent. Additionally, the `server.cjs` exposes the `OPENAI_API_KEY` via a local API endpoint (`/api/key`), which is then used directly by `index.html` for client-side OpenAI API calls, making the key accessible in the browser.