ClawHub

it will help you to send voice messages to your AI Assistant and also can make it talk

v1.0.0

Text-to-Speech and Speech-to-Text using ElevenLabs AI. Use when the user wants to convert text to speech, transcribe voice messages, or work with voice in multiple languages. Supports high-quality AI voices and accurate transcription.

⭐ 1· 2.6k·21 current·21 all-time
by@amreahmed
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
ℹ
Purpose & Capability
The name, description, SKILL.md and included Python scripts consistently implement ElevenLabs Text-to-Speech and Speech-to-Text and call api.elevenlabs.io. The capability matches the stated purpose.
ℹ
Instruction Scope
SKILL.md instructs the agent/user to set ELEVENLABS_API_KEY and shows CLI and code usage for TTS and STT. The runtime instructions only access audio files, write output audio, and call ElevenLabs APIs — they do not request unrelated system files or other credentials. Minor note: examples reference a generic message(action="send", ...) integration but no unexpected external endpoints are used.
ℹ
Install Mechanism
There is no install spec (instruction-only install), which minimizes disk-write risk. However, the included Python scripts require third-party packages (requests, python-dotenv) that are not declared in the registry metadata; that omission is an incoherence that could cause surprises when attempting to run the skill.
!
Credentials
Both SKILL.md and the scripts rely on an ELEVENLABS_API_KEY (read from environment or .env). The registry metadata lists no required env vars or primary credential — this is a clear mismatch. Aside from that single API key, no other secrets are accessed, so the key itself is proportionate to the stated function but should be declared.
✓
Persistence & Privilege
The skill is not always:true and does not request persistent/privileged system presence or modify other skills' configurations. It behaves like a normal user-invocable skill.
What to consider before installing
This skill appears to implement ElevenLabs TTS/STT and will send audio/text to api.elevenlabs.io using an ELEVENLABS_API_KEY. Before installing: (1) confirm the registry metadata is updated to declare the ELEVENLABS_API_KEY requirement and any Python dependencies (requests, python-dotenv); (2) only provide an API key scoped for this use (do not reuse broad or long-lived keys); (3) review or run the scripts in a safe environment to verify behavior and that no other secrets are read; (4) be cautious about placing .env in a shared workspace root — avoid storing unrelated credentials there. The mismatch between metadata and the actual code is the main reason this is flagged as suspicious rather than benign.

Like a lobster shell, security has layers — review code before you run it.

latestvk9770e88cbhshkhtgccyh25nzx80d52v

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments