Voice Ai Integration
v0.1.5Integrate Shengwang products: ConvoAI voice agents, RTC audio/video, RTM messaging, Cloud Recording, and token generation. Use when the user mentions Shengwa...
⭐ 0· 273·2 current·2 all-time
byHugo Chan@hugochaan
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the files and instructions: local reference docs, routing rules, and doc-fetch helper scripts are appropriate for a Shengwang/ConvoAI integration helper. Network targets (doc.shengwang.cn, doc-mcp.shengwang.cn, gitee.com) and git cloning of sample repos are expected for this purpose.
Instruction Scope
Runtime instructions require running scripts to download a docs index and to fetch individual doc pages, and they may git-clone sample repos for inspection. The SKILL.md includes safety rules (state downloads, prefer temp paths, don't modify user projects until asked). It also instructs the agent to route automatically to product modules when intent is clear, which can lead to fetching docs or cloning repos without extra confirmations — not inherently malicious but worth noting for user consent.
Install Mechanism
No install spec; this is instruction-only plus two small shell helper scripts. That is low-risk compared with arbitrary downloads or package installs. The documented network sources are standard (official doc host and gitee).
Credentials
The skill's metadata does not request environment variables or credentials. The reference docs list many provider-specific env var names (LLM/TTS/ASR) but only as informational requirements for using Shengwang services — they are not required by the skill itself at install time.
Persistence & Privilege
The skill is not always-included and does not request elevated privileges. It instructs temporary repo cloning and avoiding writing into the user's main workspace unless explicitly asked. Autonomous invocation by the agent is allowed (platform default) but not combined with other red flags.
Assessment
This skill appears to do what it says: route Shengwang/ConvoAI questions to the correct product docs and, when needed, fetch official docs or clone example repos from gitee.com. Before installing or allowing the agent to run it, consider: 1) Review the two helper scripts (fetch-docs.sh, fetch-doc-content.sh) so you know exactly which URLs will be requested and where files will be written. 2) Be prepared that the agent may fetch documentation or clone sample repos into a temporary path — confirm you are comfortable with network access to doc.shengwang.cn, doc-mcp.shengwang.cn, and gitee.com. 3) The skill does not request credentials upfront, but using product APIs later will require your Shengwang/third‑party keys; provide those only when you explicitly choose to perform actions that need them. 4) If you want stricter control, disable autonomous invocation for this skill or require the agent to ask for permission before performing network fetches or cloning repositories.Like a lobster shell, security has layers — review code before you run it.
latestvk97dnpnnd9t8sad0zaj5wv3swn83jmv6
License
MIT-0
Free to use, modify, and redistribute. No attribution required.