Voice Input Patch – Dual Mic Buttons
ReviewAudited by ClawScan on May 10, 2026.
Overview
This is a plausible OpenClaw voice UI patch, but it asks for broad local file access and may direct users to recursively change OpenClaw install permissions without enough explanation.
Only use this if you intentionally want to patch OpenClaw’s installed UI. Back up the target file first, avoid running recursive sudo/chown commands unless you fully understand them, prefer a narrowly scoped file copy workflow, and remember that the patched microphone feature can automatically send what it transcribes.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Running this could make all OpenClaw dist files editable by the user or agent, increasing the chance of accidental or unauthorized changes.
The skill suggests recursively changing ownership of the OpenClaw distribution directory to grant write access. That is broader than editing the single target JavaScript file and can weaken the permission boundary around installed application files.
`sudo chown -R $(whoami) /path/to/openclaw/dist/`
Avoid recursive chown if possible. Prefer copying only the target file for patching, restoring from backup, or granting narrowly scoped write access only to the specific file.
A user may approve a risky permission change without understanding what it does or how broad it is.
The instruction to not over-explain appears immediately after asking the user to grant broad write access, which could reduce informed user consent for a privileged filesystem change.
Or give me write access: `sudo chown -R $(whoami) /path/to/openclaw/dist/` ... `Keep it simple. Don't over-explain.`
The skill should clearly explain the security and reversibility implications of any sudo or ownership-change command before asking the user to run it.
The agent or user may scan large parts of the local filesystem just to find one OpenClaw file.
The skill uses broad filesystem searches to locate the OpenClaw UI asset. This is purpose-aligned but can traverse far outside the workspace and may be slow or intrusive.
`find / -path "*/openclaw/dist/control-ui/assets/index-*.js" 2>/dev/null | head -1` and `Get-ChildItem -Path C:\ -Recurse -Filter "index-*.js"`
Prefer asking the user for the OpenClaw install path or using a narrower path such as the global npm root before resorting to whole-drive searches.
A bad or incompatible edit could break the Control UI, and the patched UI can automatically send transcribed speech.
The skill modifies bundled JavaScript that OpenClaw will execute in the Control UI. This is central to the stated patch, but it changes live application behavior and the provided replacement block was partially truncated in the artifact.
Replace the ENTIRE mic button block ... `e.onSend()` ... `window.__sttCont=MC`
Keep the backup, verify the expected patterns exactly, review the full patch before applying it, and restore the .bak file if the UI behaves unexpectedly.
