Xiaomi MiMo Voice

小米 MiMo V2 TTS 语音合成。支持中文、英文及多种风格（情感、角色扮演、方言、语速控制等）。

This appears to be a legitimate TTS script, but the documentation and code disagree about where the API key lives. Before installing or supplying a key: (1) prefer setting MIMO_API_KEY as an environment variable (export MIMO_API_KEY=...) so the script will find it; (2) if you want to put the key in ~/.openclaw/openclaw.json, add it under tools.mimoTts.apiKey or edit the script to read skills.entries.xiaomi-mimo-voice.env.MIMO_API_KEY as the README suggests; (3) inspect the API host (https://api.xiaomimimo.com) to ensure it's the expected service for your key; and (4) if you need stronger assurance, ask the maintainer to fix the documentation/config mismatch or modify the script to accept the documented config path. There is no evidence of data exfiltration, but do not provide high-privilege credentials (AWS, GitHub tokens, etc.) — only the service API key should be used.

Type: OpenClaw Skill Name: xiaomi-mimo-voice Version: 1.0.4 The skill provides Text-to-Speech (TTS) functionality using the Xiaomi MiMo V2 API. The core logic in `scripts/tts.py` is a standard implementation that sends text to a remote endpoint (api.xiaomimimo.com) and saves the returned audio data. It handles configuration through environment variables or the local `openclaw.json` file as expected for this platform, and no evidence of malicious execution, data exfiltration, or prompt injection was found.