Voice Input Patch – Dual Mic Buttons

ReviewAudited by ClawScan on May 10, 2026.

Overview

This is a plausible OpenClaw voice UI patch, but it asks for broad local file access and may direct users to recursively change OpenClaw install permissions without enough explanation.

Only use this if you intentionally want to patch OpenClaw’s installed UI. Back up the target file first, avoid running recursive sudo/chown commands unless you fully understand them, prefer a narrowly scoped file copy workflow, and remember that the patched microphone feature can automatically send what it transcribes.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Running this could make all OpenClaw dist files editable by the user or agent, increasing the chance of accidental or unauthorized changes.

Why it was flagged

The skill suggests recursively changing ownership of the OpenClaw distribution directory to grant write access. That is broader than editing the single target JavaScript file and can weaken the permission boundary around installed application files.

Skill content
`sudo chown -R $(whoami) /path/to/openclaw/dist/`
Recommendation

Avoid recursive chown if possible. Prefer copying only the target file for patching, restoring from backup, or granting narrowly scoped write access only to the specific file.

What this means

A user may approve a risky permission change without understanding what it does or how broad it is.

Why it was flagged

The instruction to not over-explain appears immediately after asking the user to grant broad write access, which could reduce informed user consent for a privileged filesystem change.

Skill content
Or give me write access: `sudo chown -R $(whoami) /path/to/openclaw/dist/` ... `Keep it simple. Don't over-explain.`
Recommendation

The skill should clearly explain the security and reversibility implications of any sudo or ownership-change command before asking the user to run it.

What this means

The agent or user may scan large parts of the local filesystem just to find one OpenClaw file.

Why it was flagged

The skill uses broad filesystem searches to locate the OpenClaw UI asset. This is purpose-aligned but can traverse far outside the workspace and may be slow or intrusive.

Skill content
`find / -path "*/openclaw/dist/control-ui/assets/index-*.js" 2>/dev/null | head -1` and `Get-ChildItem -Path C:\ -Recurse -Filter "index-*.js"`
Recommendation

Prefer asking the user for the OpenClaw install path or using a narrower path such as the global npm root before resorting to whole-drive searches.

What this means

A bad or incompatible edit could break the Control UI, and the patched UI can automatically send transcribed speech.

Why it was flagged

The skill modifies bundled JavaScript that OpenClaw will execute in the Control UI. This is central to the stated patch, but it changes live application behavior and the provided replacement block was partially truncated in the artifact.

Skill content
Replace the ENTIRE mic button block ... `e.onSend()` ... `window.__sttCont=MC`
Recommendation

Keep the backup, verify the expected patterns exactly, review the full patch before applying it, and restore the .bak file if the UI behaves unexpectedly.