Xiaozhi Claw

• Analyzed: May 11, 2026, 6:12 AM
• Findings: 1
• Version: 1.0.0
• Hash: e23e8e31c5952cefebd7dd99f8dac04b6409ebc80665a75edbf20d04e370d72b
• Source: palm
• External report: View on VirusTotal

Findings (1)

The xiaozhiclaw skill bundle is a legitimate integration for XiaoZhi AI ESP32 hardware, enabling real-time voice interaction with OpenClaw agents. It implements a WebSocket server (src/websocket-server.ts) to handle Opus audio streaming and utilizes the Volcengine Doubao API (src/doubao-service.ts) for STT/TTS processing. The code follows standard practices, such as using environment variables for credentials and providing clear documentation of its network and audio processing requirements, with no evidence of malicious intent or suspicious behavior.