Alicloud Ai Audio Tts Voice Design
PassAudited by ClawScan on May 1, 2026.
Overview
This skill is a coherent Alibaba Cloud voice-design helper, with expected notes around installing an SDK, using an API key, and saving request/output files locally.
Before installing, confirm you trust the dashscope SDK source, use a scoped Alibaba/DashScope API key, and be aware that prompts, input text, and response summaries may be saved locally under the output directory.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing an unpinned package can expose the user to future package changes or dependency issues.
The skill instructs installing an external SDK without a pinned version. This is central to the Alibaba Cloud integration and is user-directed, but the resolved package version may change over time.
python -m pip install dashscope
Install in a virtual environment as instructed, verify the package source, and consider pinning a known-good dashscope version.
Use of the API key may consume quota, incur charges, or create provider-side voice-generation activity under the user's account.
The skill requires provider account credentials for Alibaba Cloud Model Studio access. This is expected for the stated function, but it gives the workflow access to account-backed API usage.
Set `DASHSCOPE_API_KEY` in your environment, or add `dashscope_api_key` to `~/.alibabacloud/credentials`.
Use a least-privileged DashScope/Alibaba Cloud key, keep it out of prompts and logs, and revoke or rotate it if exposed.
Sensitive text or voice descriptions used in requests may remain on disk in the output directory.
The helper writes the voice prompt and text into a local JSON request file by default. This is disclosed and useful for reproducibility, but it persists user-provided content.
parser.add_argument("--output", default="output/ai-audio-tts-voice-design/request.json") ... out.write_text(json.dumps(req, ensure_ascii=False, indent=2), encoding="utf-8")Avoid using confidential text unless needed, choose an appropriate output directory, and delete generated request/output files when no longer needed.