ClawHub

Chat With Anyone

v0.1.1

Chat with any real person or fictional character in their own voice by automatically finding their speech online, extracting a clean reference sample, and ge...

⭐ 0· 235·1 current·1 all-time
bykusuriuri@ksuriuri·duplicate of @ksuriuri/noizai-chat-with-anyone (0.1.0)·canonical: @ksuriuri/noiz-chat-with-anyone
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The skill claims to clone/design voices and generate TTS. It needs ffmpeg/yt-dlp to fetch and extract audio and the NOIZ API to design voices; the included scripts implement exactly those tasks. Declared primaryEnv=NOIZ_API_KEY matches the voice_design script's behavior and the SKILL.md's dependency on a tts skill.
✓
Instruction Scope
Runtime instructions are specific: web search -> download video with yt-dlp -> parse SRT -> extract audio with ffmpeg -> call tts or Noiz voice-design. The skill requires network and filesystem access (declared). It asks the agent to upload images/audio to the Noiz API and to use vision capabilities for images; it also includes explicit ethical guidance to avoid impersonation. There are no instructions to read unrelated system files or exfiltrate arbitrary data.
✓
Install Mechanism
There is no install spec; this is instruction+script based. Both included Python scripts run locally and call known tools (ffmpeg) and an external API (noiz.ai). No remote download/install from untrusted URLs is present in the manifest.
ℹ
Credentials
Only NOIZ_API_KEY is listed as the primary credential, which is appropriate. However, the voice_design script will also look for a ~/.noiz_api_key file if the env var is not set — that config path is not declared in the metadata. The skill uploads images and reference audio to an external service (https://noiz.ai), so users should be aware they are sending potentially sensitive personal media off-device.
✓
Persistence & Privilege
The skill is not always-enabled, does not request elevated platform privileges, and does not modify other skills or global agent settings. It writes temporary files (tmp/... and voice_id.txt) but has no persistence beyond normal runtime artifacts.
Assessment
This skill is internally consistent with its stated purpose, but before installing: 1) Ensure you trust the Noiz service and read its privacy policy — the skill uploads images and audio to noiz.ai. 2) Provide NOIZ_API_KEY only if you accept that external uploads will occur; the script may read ~/.noiz_api_key if the env var is not set. 3) Do not use the skill to impersonate private individuals or for deception — the SKILL.md notes this but the tool cannot enforce intent. 4) Confirm ffmpeg, yt-dlp, and the referenced tts skill are installed and available. 5) Consider using a scoped/revocable API key and monitor its usage; revoke it if you see unexpected network activity. If you want stronger assurance, manually inspect the two included scripts (they're short and straightforward) and monitor outbound connections during a test run.

Like a lobster shell, security has layers — review code before you run it.

latestvk973c0v7sgr4qjtvkfb5fjbgsd834gy3

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

Primary envNOIZ_API_KEY

Comments