Xiaozhi Claw

XiaoZhi AI Device (ESP32) integration for OpenClaw. Enables real-time voice interaction with your AI assistant through XiaoZhi hardware. Supports WebSocket b...

This plugin appears to implement what it claims: a local WebSocket bridge that streams Opus audio to/from a XiaoZhi ESP32 and uses Volcengine Doubao for STT/TTS. Before installing: (1) confirm you trust Volcengine (openspeech.bytedance.com) before providing DOUBAO_APP_ID/DOUBAO_ACCESS_TOKEN; treat those secrets like any API keys and keep them out of version control (.env is used). (2) Be aware the plugin opens a WebSocket port (default 8080) on the host — if you expose that port to untrusted networks it could be abused; prefer local network or firewall rules. (3) Note the minor config mismatch: plugin manifests reference other STT/TTS providers but the code uses Doubao — review and adjust config/schema if you expect different providers. (4) If you need higher assurance, review the Doubao request implementation and test the plugin in an isolated environment first.

Type: OpenClaw Skill Name: xiaozhiclaw Version: 1.0.0 The xiaozhiclaw skill bundle is a legitimate integration for XiaoZhi AI ESP32 hardware, enabling real-time voice interaction with OpenClaw agents. It implements a WebSocket server (src/websocket-server.ts) to handle Opus audio streaming and utilizes the Volcengine Doubao API (src/doubao-service.ts) for STT/TTS processing. The code follows standard practices, such as using environment variables for credentials and providing clear documentation of its network and audio processing requirements, with no evidence of malicious intent or suspicious behavior.