Audio Broadcast

控制小播鼠广播系统进行音频播放和广播通知。使用当用户需要向广播设备播放音频、设置音量、管理定时广播任务、或查看设备状态时。支持播放音频文件、URL播放、音量调节、设备管理、定时任务管理、文字转语音(TTS)广播等功能。Control xiaoboshu broadcast system for audio pla...

Security Scan

The skill mostly does what it says (control Xiaoboshu broadcast devices), but the package includes embedded credentials and APIs that can be repurposed to send callbacks to external hosts — those inconsistencies warrant caution before installation.

Purpose & Capability

Name/description match the code and documentation: the scripts implement login, device/file/task management, playback and TTS as described. However the package ships a config.json containing host/id/token/username (admin token) which is unexpected for a 'no-credentials-required' skill and is disproportionate to a purely instruction-only helper.

Instruction Scope

SKILL.md and scripts instruct the agent to read and write a local config.json and to POST to many /user/* endpoints on the configured host. The API surface includes endpoints for setting report UDP IPs and callback URLs (setreportudpip, setwaringlinewifi, precacheurlwifi, etc.) — these allow configuring device callbacks and can be used to exfiltrate data or direct devices to external hosts if misused. The docs also recommend creating a cron job under /root/.picoclaw/... which presumes privileged or specific filesystem layout. The skill also expects external binaries (ffmpeg, eyeD3) for metadata operations even though none are declared.

Install Mechanism

No install spec; this is an instruction-plus-scripts package (no downloaded code at install time). That lowers install-time risk because nothing is fetched from arbitrary URLs.

Credentials

Declared requirements are empty, but the code relies on a local config.json for credentials. The shipped config.json contains host=127.0.0.1:12080 and a token and username (admin). Including credentials in the bundle is unexpected and risky: it may expose an account/token or cause the skill to operate using someone else's credentials. There is a mismatch between declared 'no credentials' and the practical need for an id/token.

Persistence & Privilege

always:false and the skill is not automatically forced into every agent run. The docs recommend adding a daily cron job to run cleanup_tts.py (persistence on the host if the user follows guidance). That is not intrinsically malicious but creates ongoing privileged activity if scheduled under root paths suggested in the README.

What to consider before installing

Before installing or enabling this skill: - Inspect and remove or replace the bundled config.json: it contains an ID, token, host and username (admin). Do not use the included token; instead run the provided login command to store your own credentials, or delete the file so the script cannot operate until you configure it. - Treat endpoints that set report/callback IPs (setreportudpip, setwaringlinewifi, etc.) as sensitive: they can be used to make devices call out to external hosts. If you will use this skill, verify it cannot be used to send device data or callbacks to attacker-controlled servers. - The SKILL.md suggests creating a cron job under /root/.picoclaw/… — avoid blindly copying that path. If you need scheduled cleanup, run it under an appropriate unprivileged account and review the script first. - The package expects external tools (ffmpeg, eyeD3, Edge TTS tooling) but does not declare them; ensure you only install tools you trust. - If you want higher assurance, ask the maintainer/source for: (1) the origin of the bundled config.json (why is an admin token included?), (2) confirmation that the token is a placeholder, and (3) a minimal list of endpoints the skill will call and any side-effecting functions (especially callbacks or report-setting APIs). If you cannot verify those, consider running the skill in an isolated network or decline installation.

小播鼠广播系统 / Xiaoboshu Broadcast System

无锡小播鼠网络科技有限公司 / Wuxi Xiaoboshu Network Technology Co., Ltd.

📧 邮箱: [e-mail]

支持设备 / Supported Devices:

• 局域网 / LAN
• 互联网 / Internet
• WiFi音响 / WiFi Speaker
• 有线网络广播 / Wired Network Broadcast
• 4G广播设备 / 4G Broadcast Device
• 石头音响 / Rock Speaker
• 草坪音响 / Lawn Speaker
• 功放机 / Amplifier

🎵 PLOYQ

控制小播鼠广播设备进行音频播放和通知广播。

快速开始

1. 登录

python scripts/xiaoboshu.py login <host> <username> <password>

• host: 服务器地址，如 127.0.0.1:12080
• username: 用户名
• password: 密码

登录后会保存凭据到 config.json。

2. 查看设备

python scripts/xiaoboshu.py devices

3. 播放音频

# 播放文件 (使用文件 ID 或文件名)
python scripts/xiaoboshu.py play <file_id> <device_ids|all>

# 播放 URL
python scripts/xiaoboshu.py play <url> <device_ids|all>

• file_id: 文件 ID 或文件名
• device_ids: 设备 ID，多个用 | 分隔，或用 all 表示全部设备
• url: 音频文件 URL

4. 停止播放

python scripts/xiaoboshu.py stop <device_ids|all>

5. 调节音量

python scripts/xiaoboshu.py volume <volume> <device_ids|all>

• volume: 音量值 (0-100)

文字转语音 (TTS)

基本用法

python scripts/xiaoboshu.py tts "要广播的文字" <device_ids|all>

指定语音

python scripts/xiaoboshu.py tts "要广播的文字" all --voice=yunxi

查看可用语音

python scripts/xiaoboshu.py voices

中文语音列表

名称	描述
xiaoxiao	晓晓 - 女声，自然亲切 (默认)
yunxi	云希 - 男声，年轻活力
yunjian	云健 - 男声，成熟稳重
xiaoyi	晓伊 - 女声，温柔甜美
yunxia	云夏 - 男童声
xiaochen	晓辰 - 女声，新闻播报风格
xiaohan	晓涵 - 女声，温暖
xiaomeng	晓梦 - 女声，活泼
xiaomo	晓墨 - 女声，知性
xiaoqiu	晓秋 - 女声，温和
xiaorui	晓睿 - 女童声
xiaoshuang	晓双 - 女童声
xiaoxuan	晓萱 - 女声
xiaoyan	晓妍 - 女声
xiaoyou	悠悠 - 女童声
yunfeng	云枫 - 男声
yunhao	云皓 - 男声
yunxiang	云翔 - 男声
yunyang	云扬 - 男声

设备管理

查看文件列表

python scripts/xiaoboshu.py files

定时任务

任务状态说明

任务有两个状态字段：

字段	含义	值说明
enable	任务启用状态	1=启用, 0=禁用
statu	播放状态	1=正在播放, 0=未播放

重要规则：

• enable 控制定时任务是否生效（到时间是否触发播放）
• statu 表示当前是否正在播放音频
• 删除正在播放的任务前：必须先停止（stop）→ 禁用（disable）→ 再删除（delete）

查看任务列表

python scripts/xiaoboshu.py tasks

任务操作

# 启用任务
python scripts/xiaoboshu.py task-enable <task_id>

# 禁用任务
python scripts/xiaoboshu.py task-disable <task_id>

# 启动任务 (立即执行)
python scripts/xiaoboshu.py task-start <task_id>

# 停止任务
python scripts/xiaoboshu.py task-stop <task_id>

# 删除任务
python scripts/xiaoboshu.py task-delete <task_id>

# 编辑任务名称
python scripts/xiaoboshu.py task-edit <task_id> --name=<新名称>

# 编辑任务时间
python scripts/xiaoboshu.py task-edit <task_id> --time=HH:MM:SS

# 编辑任务设备
python scripts/xiaoboshu.py task-devices <task_id> <device_ids>

# 编辑任务文件
python scripts/xiaoboshu.py task-files <task_id> <file_ids>

删除任务

重要：删除任务前必须先禁用，直接删除不会生效！

# 1. 先禁用任务
python scripts/xiaoboshu.py task-disable <task_id>

# 2. 然后删除任务
python scripts/xiaoboshu.py task-delete <task_id>

删除正在播放的任务

如果任务状态显示 ▶ 播放中，删除前必须按顺序执行：

# 1. 先停止播放
python scripts/xiaoboshu.py task-stop <task_id>

# 2. 然后禁用任务
python scripts/xiaoboshu.py task-disable <task_id>

# 3. 最后删除任务
python scripts/xiaoboshu.py task-delete <task_id>

播放规则

• 服务器上的音频文件：播放 .mp3T 结尾的 URL（WiFi 音响专用转码）
• 自己生成的 TTS 文件：直接播放 .mp3 结尾的 URL（已适配格式）

文件清理

• 接口：POST /user/delfile 参数：id, token, fileid
• 自己生成的 TTS 文件播放完成后，过一段时间要记得清理
• 文件名通常以 ttsO 或 TTS_ 开头，便于识别

自动清理脚本

技能包含 cleanup_tts.py 脚本，用于自动清理服务器上的 TTS 临时文件：

# 手动执行清理
python scripts/cleanup_tts.py

清理逻辑：

• 删除以 ttsO 或 TTS_ 开头的文件
• 保留被定时任务引用的文件（不会删除正在使用的文件）

安装后配置

创建定时清理任务

安装技能后，建议创建定时任务每天自动清理 TTS 文件：

# 每天凌晨 3 点执行清理
python /root/.picoclaw/workspace/skills/audio-broadcast/scripts/cleanup_tts.py

定时任务配置示例：

• 时间：每天凌晨 3:00
• 命令：python3 /root/.picoclaw/workspace/skills/audio-broadcast/scripts/cleanup_tts.py
• 目的：自动清理服务器上的临时 TTS 文件，释放存储空间

文件上传规则

上传前检查图片信息

重要：上传音频文件前，必须检查文件是否包含图片信息（封面图、嵌入图片等），如果有则先去除！

检查方法

# 使用 ffmpeg 查看元数据
ffmpeg -i 文件名.mp3

# 使用 eyeD3 查看（需要安装）
eyeD3 文件名.mp3

去除图片方法

# 方法1: ffmpeg（推荐，保留音频质量）
ffmpeg -i input.mp3 -map 0:a -c:a copy -map_metadata -1 output.mp3

# 方法2: eyeD3（直接修改原文件）
eyeD3 --remove-images 文件名.mp3

上传流程

1. 检查：先检查文件是否包含图片信息
2. 去除：如果有图片，先去除图片信息
3. 去重：调用 xiaoboshu.py files 检查是否已存在同名文件
4. 上传：确认无重复后再上传

去重检查

上传文件前必须先检查是否已存在同名文件：

# 查看已有文件列表
python scripts/xiaoboshu.py files

如果发现重名文件，提示用户"已存在同名文件，是否需要替换？"

常用示例

# 登录
python scripts/xiaoboshu.py login 127.0.0.1:12080 admin 123123123

# 查看设备
python scripts/xiaoboshu.py devices

# 查看文件
python scripts/xiaoboshu.py files

# 向所有设备播放文件 ID 37
python scripts/xiaoboshu.py play 37 all

# 向设备 35 和 36 播放
python scripts/xiaoboshu.py play 37 35|36

# 停止所有设备播放
python scripts/xiaoboshu.py stop all

# 设置设备音量为 50
python scripts/xiaoboshu.py volume 50 all

# TTS 广播 (默认语音)
python scripts/xiaoboshu.py tts "开饭了，请大家到餐厅用餐" all

# TTS 广播 (男声)
python scripts/xiaoboshu.py tts "注意，有快递到了" all --voice=yunxi

# TTS 广播 (女声，新闻风格)
python scripts/xiaoboshu.py tts "现在是北京时间十二点整" all --voice=xiaochen

API 参考

详细 API 文档见 references/api.md。