Claw To Talk: OpenClaw Voice Companion on iOS & Android

PassAudited by ClawScan on May 1, 2026.

Overview

This is a coherent setup guide for a mobile voice companion, but it involves exposing an OpenClaw gateway through Tailscale and handling access tokens/API keys.

Before using this skill, verify the Claw To Talk app and website, use a strong unique gateway token, approve only devices you recognize, and understand how to disable Tailscale Serve or rotate credentials if you no longer want mobile access.

Findings (5)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Users will need to trust and install a separate mobile app before giving it access to their OpenClaw gateway.

Why it was flagged

The setup relies on an external mobile app and beta distribution path that are not part of the reviewed skill artifacts.

Skill content
iOS: Search "Claw To Talk" in the App Store ... Android: Join the public beta (contact alvin@boringdystopia.ai)
Recommendation

Verify the app publisher, website, and beta enrollment source before installing or entering tokens.

What this means

If configured incorrectly or used with a weak token, the OpenClaw gateway could be reachable by unintended devices on the tailnet.

Why it was flagged

The guide asks the user to run commands that expose the OpenClaw gateway through Tailscale and restart gateway services.

Skill content
tailscale serve --bg --yes 18789
openclaw gateway restart
Recommendation

Use a strong unique gateway token, confirm the port and tailnet are correct, and avoid approving unknown devices.

What this means

Anyone who obtains the gateway token or API key may be able to access the gateway or use the associated ElevenLabs account.

Why it was flagged

The setup requires a gateway token and optionally an ElevenLabs API key, both of which grant access to services or accounts.

Skill content
Enter your Tailscale MagicDNS address ... and the gateway token ... Add ElevenLabs key in the app settings
Recommendation

Keep tokens private, rotate them if exposed, and use separate or limited-scope credentials where available.

What this means

Voice companion data and generated speech workflows may pass through the configured app, tailnet, gateway, and optional provider.

Why it was flagged

The skill sets up communication between a phone app, the OpenClaw gateway, Tailscale, and optionally an external TTS provider.

Skill content
Make sure both your phone and the OpenClaw machine are connected to the same Tailscale tailnet ... optional ElevenLabs TTS with lip sync
Recommendation

Use trusted devices only, review the app/provider privacy terms, and avoid sending sensitive content unless you are comfortable with that data flow.

What this means

Remote gateway availability may remain active until the user disables Tailscale Serve or changes the configuration.

Why it was flagged

The '--bg' option starts Tailscale Serve in the background, so the remote access setup can continue after the initial command completes.

Skill content
tailscale serve --bg --yes 18789
Recommendation

Know how to stop Tailscale Serve, revoke device approval, and rotate the gateway token when the mobile access is no longer needed.