it will help you to send voice messages to your AI Assistant and also can make it talk

PassAudited by ClawScan on May 1, 2026.

Overview

The skill appears to do what it claims—ElevenLabs speech transcription and voice generation—but users should know it sends text/audio to ElevenLabs and uses an API key.

This skill is coherent with its stated voice features. Before installing, make sure you are comfortable sending selected text or voice files to ElevenLabs, store the API key securely, and review the simple Python scripts/dependencies because the registry metadata does not fully declare them.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Audio sent for transcription leaves the local environment and is processed by ElevenLabs.

Why it was flagged

The transcription script uploads the selected audio file to ElevenLabs. This is expected for speech-to-text, but voice messages can contain sensitive personal or business information.

Skill content
self.base_url = "https://api.elevenlabs.io/v1" ... response = requests.post(url, headers=headers, data=data, files=files, timeout=120)
Recommendation

Only transcribe audio you are comfortable sending to ElevenLabs, and review ElevenLabs privacy and retention terms if the audio is sensitive.

What this means

Using the skill requires an ElevenLabs credential, which may incur usage charges and should be protected like a password.

Why it was flagged

The script reads an ElevenLabs API key from the environment or a .env file. This is expected for the ElevenLabs API, but the registry metadata does not declare a primary credential or required environment variable.

Skill content
load_dotenv(dotenv_path=os.path.join(os.path.dirname(__file__), '..', '..', '..', '.env')) ... self.api_key = api_key or os.getenv('ELEVENLABS_API_KEY')
Recommendation

Use a dedicated ElevenLabs API key with appropriate limits, keep it out of shared files, and revoke it if it is exposed.

What this means

Users may need to inspect the included scripts and manage Python dependencies themselves.

Why it was flagged

The skill includes Python code but lacks source/homepage provenance and an install spec. This does not contradict the stated purpose, but dependency and provenance details are under-declared.

Skill content
Source: unknown; Homepage: none; Install specifications: No install spec — this is an instruction-only skill. Code file presence: 2 code file(s)
Recommendation

Review the included Python files before use and install only the necessary trusted dependencies, such as requests and python-dotenv, from known sources.