language-helper
v1.2.2Use this skill whenever the user wants to learn how to say something in another language. Triggers include: language tags like 【日语】【英语】【韩语】【法语】【西班牙语】【德语】 fol...
⭐ 0· 110·0 current·0 all-time
byIgloos@igloomatics
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill translates text and produces TTS audio. Requiring a SenseAudio API key and ffmpeg for audio conversion is coherent with that purpose. Optional Feishu credentials (FEISHU_APP_ID/FEISHU_APP_SECRET/FEISHU_CHAT_ID) are present for the 'send-voice' feature and are reasonable.
Instruction Scope
SKILL.md instructs the agent to create/use a local .env, call the SenseAudio TTS endpoint, and optionally call Feishu APIs — all within the stated scope. Minor mismatch: main.py may print a local file path when no player is available (SKILL.md asked not to show local file paths). Also the skill auto-creates a .env template in skills/language-helper/.env which the user must populate; this writes a file containing secrets on disk (expected for local usage but worth noting).
Install Mechanism
No install script or external downloads; code is included in the skill bundle and relies on preinstalled ffmpeg. This is low risk compared to pulling/executing remote archives.
Credentials
Only SENSEAUDIO_API_KEY is required; Feishu credentials are optional. That is proportionate to a TTS + optional messaging feature. Users should be aware the skill expects the API key in a local .env file (written by the skill) which will store secrets on disk — do not commit that file to source control.
Persistence & Privilege
The skill is not always-enabled and does not request elevated system privileges. The repository includes a .claude/settings.local.json file that lists allowed WebFetch domains — this is a local agent settings file bundled with the skill and may influence allowed agent web fetches. Including such a settings file is not inherently malicious, but users should review and be comfortable with those allowed domains.
Assessment
This skill appears to do what it says: translate text and produce TTS via SenseAudio, with an optional Feishu delivery feature. Before installing: 1) Ensure you trust the SenseAudio service (API calls go to https://api.senseaudio.cn) and be comfortable storing its API key in a local file (skills/language-helper/.env). Do not commit that .env to source control. 2) If you won't use Feishu, you can leave FEISHU_* unset; if you do use it, Feishu credentials are required and will be used to obtain a tenant token and upload/send audio. 3) ffmpeg must be installed for conversion/playback. 4) Note the bundled .claude/settings.local.json that configures allowed WebFetch domains — review it if you have policies about agent network access. Overall the components are proportionate to the feature set; proceed if you trust the TTS provider and follow the guidance above.Like a lobster shell, security has layers — review code before you run it.
latestvk97ape2emey6qt0k8sqm72bqv9838d2z
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binsffmpeg
EnvSENSEAUDIO_API_KEY