Xiaozhi Mcp Server

让小智智能盒子连接OpenClaw，成为你的智能语音助手

This skill appears to do what it says (bridge Xiaozhi to OpenClaw), but review a few things before installing: 1) inspect scripts/start.sh — it may auto-install Python packages globally using pip3 --break-system-packages; consider running inside a virtualenv or container instead. 2) ensure you trust and have the 'openclaw' CLI installed (server.py calls 'openclaw agent'); otherwise the service will fail. 3) start.sh contacts ifconfig.me to fetch a public IP at startup (no data exfiltration visible, but it's an external network call). 4) check the generated token file at ~/.config/openclaw-mcp/token and the target_session setting to avoid accidentally delivering replies to the wrong account. 5) the package.json metadata is slightly inconsistent (lists Python deps), which looks like sloppy packaging but not necessarily malicious. If you need higher assurance, ask the author for a packaged install or run the server in an isolated environment and audit runtime behavior (network endpoints, spawned processes).

Type: OpenClaw Skill Name: xiaozhi-mcp-server Version: 2.0.8 The skill bundle is a legitimate integration between Xiaozhi smart speakers and the OpenClaw AI assistant. The core logic in `scripts/server.py` implements an MCP server that forwards voice commands to the OpenClaw CLI using safe `subprocess.run` calls (avoiding shell injection) and includes a `sanitize_message` function to filter input. The bundle includes standard setup scripts, configuration files, and ESP32 client code that align perfectly with the stated purpose of providing a voice-to-AI bridge.