Audio Play

Play audio files using Windows media player. Non-blocking execution.

Security Scan

The skill's instructions and plugin metadata refer to a local Python script and an absolute Windows path that are not included in the package, which is internally inconsistent and could cause the agent to access files on your machine or fail to run as described.

Purpose & Capability

The stated purpose (play audio on Windows) is plausible, but the package contains no code to perform that action. The plugin's entry points to an absolute host path (/mnt/h/.../audio_play.py) that is not bundled — this does not align with a distributable skill and suggests reliance on files on the user's filesystem.

Instruction Scope

SKILL.md instructs the agent to run a local Python script via WSL (wsl -> python.exe scripts/audio_play.py) and to access Windows paths (/mnt/h/...). Those instructions require reading/launching executables on the host machine and a visible desktop. The referenced script and paths are missing from the package, so the instructions either can't be executed or would force the agent to access unspecified local files.

Install Mechanism

There is no install spec (instruction-only), which is low risk in general, but the plugin metadata (openclaw.plugin.json) sets entry to an absolute host filesystem path rather than a bundled relative entry. That mismatch is suspicious because it implies the skill expects code outside the package.

Credentials

The skill declares no environment variables or credentials, yet its instructions require WSL access, launching Windows executables, and reading from /mnt/h. While not explicitly requesting secrets, the skill implicitly needs permission to access arbitrary host file paths and execute local programs — capability not conveyed in the metadata.

Persistence & Privilege

The skill does not request permanent presence (always:false) and does not declare actions that modify other skills or global agent settings. Autonomous invocation is allowed (default), which is normal and not by itself a red flag.

What to consider before installing

Do not install or run this skill as-is. Before proceeding, ask the publisher to: (1) include the referenced script (scripts/audio_play.py) and any other code files in the package, or change the plugin entry to a bundled relative path; (2) explain why the skill needs WSL/Windows executable access and list any binaries it will run; (3) provide a minimal, reviewable implementation (or source link) so you can inspect exactly what will be executed; and (4) confirm the skill will not read arbitrary files outside its working directory. If you must test it, run it in an isolated environment (sandbox/VM) and do not grant it access to sensitive directories.

Usage

python scripts/audio_play.py <audio_path> [--config player_config.json]

Parameters

• audio_path (required): Absolute path to audio file
• config (optional): Player configuration file

Player Config (player_config.json)

{
  "player": "vlc",
  "player_path": "C:/Program Files/VideoLAN/VLC/vlc.exe"
}

Returns

{
  "success": true,
  "audio_path": "H:/works/audio/xxx.mp3",
  "player_used": "vlc",
  "duration": 1200
}

Tools

play_audio

Play audio file with media player

Workflow Integration

This skill is part of the YouTube translation workflow:

1. youtube-audio-download: Download audio from YouTube
2. doubao-launch: Launch Doubao translation window
3. audio-play: Play the downloaded audio
4. doubao-capture: Capture translated subtitles

Execution

All skills execute on Windows Python via WSL cross-platform call:

wsl -> python.exe scripts/audio_play.py ...

Error Handling

All skills return JSON with success field:

• success: true - Operation completed
• success: false - Check error_code and error_message

Notes

• Windows GUI automation requires visible desktop (no RDP disconnect)
• Output files are stored in Windows works/ directory
• WSL accesses Windows files via /mnt/h/...