ClawHub

06 Tts Voice

v1.0.3

Convert short drama dialogues into multi-character, emotional TTS audio matching scene rhythm for enhanced expressive content.

⭐ 0· 117·1 current·1 all-time
by@ghwyever
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (TTS for short drama/dialogue) match the implementation: skill.js posts the dialogue to a TTS endpoint using model, API key, and base URL. No unrelated capabilities or extra privileges are requested.
ℹ
Instruction Scope
SKILL.md and code both require API_KEY, API_BASE, and MODEL_NAME and only send the dialogue text to `${API_BASE}/tts`. This is expected, but it means user-provided dialogue is transmitted to whatever host API_BASE points to — the SKILL.md does not identify or vouch for any provider, so the user must ensure the configured endpoint is trusted.
✓
Install Mechanism
Instruction-only with a small nodejs skill.js file; there is no install script, no downloads, and no additional packages pulled in. Low install risk.
✓
Credentials
Declared environment variables (API_KEY, API_BASE, MODEL_NAME) are directly used by the code and are appropriate for a generic TTS integration. API_KEY is sensitive — its use here is justified by the integration but requires the user to trust the remote service.
✓
Persistence & Privilege
always:false and no modifications to other skills or system settings. The skill does not request persistent/system-wide privileges.
Assessment
This skill forwards your provided dialogue to the HTTP API you configure via API_BASE using the API_KEY you supply. Before installing or using it: (1) point API_BASE to a trusted TTS provider and verify its privacy/retention policy, (2) use an API key with least privilege and rotate/revoke it if needed, (3) avoid sending highly sensitive content through unknown endpoints, and (4) confirm that returned audio_url points to the expected host and content. The implementation is small and clear, but data exfiltration risk depends entirely on the remote endpoint you configure.

Like a lobster shell, security has layers — review code before you run it.

latestvk973znd329cmk3qq4gv4ht5fqs84jt3w

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments