Voice
PassAudited by ClawScan on May 1, 2026.
Overview
The skill is a coherent Telegram voice-assistant instruction, with purpose-aligned but noteworthy use of Telegram sending, TTS, voice transcription, and an undeclared pip dependency.
This appears safe to review as a normal Telegram voice helper, but install it only if you are comfortable with the agent transcribing Telegram voice messages, using a TTS service, sending Telegram voice replies, and manually installing the faster-whisper dependency if needed.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent could send voice replies in Telegram conversations when used for this workflow.
The skill instructs the agent to use a tool to send Telegram voice replies. This is central to the stated purpose, but it means the agent may send messages through the user's Telegram context.
"action": "send", "channel": "telegram", "message": "<text>", "asVoice": true
Install only if you want the agent to send Telegram voice replies, and review agent behavior in conversations where mistaken or premature replies could matter.
Installing the dependency would add third-party Python package code to the environment.
The skill documents an unpinned external Python package install, while the registry says there is no install spec. The dependency is purpose-aligned for transcription, but users should notice the setup requirement.
faster-whisper: `pip install faster-whisper`
If installing manually, use a trusted package source and consider pinning/reviewing the faster-whisper package version.
Conversation text intended for voice replies may be handled by the configured TTS/Telegram services.
The skill routes generated speech/text through a Telegram/TTS workflow. This is expected for a voice communication skill, but the specific TTS provider/data boundary is not described in the artifact.
Use the tts tool to send voice replies ... "channel": "telegram"
Use this only with Telegram/TTS configurations whose privacy and retention behavior you trust.
