Bedtime Radio

PassAudited by ClawScan on May 1, 2026.

Overview

This skill does what it says: it creates bedtime-story audio through SenseAudio, but users should know it uses an API key, sends story text to that service, and writes local audio files.

This appears safe to use for its stated purpose. Before installing, make sure you are comfortable providing a SenseAudio API key, sending generated story text to SenseAudio, and allowing the skill to create local JSON and MP3 files.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Using the skill may consume quota or incur charges on the user's SenseAudio account.

Why it was flagged

The skill requires a provider API key, which is expected for calling the SenseAudio TTS service but should still be treated as a credential.

Skill content
requires:\n  env:\n    - SENSEAUDIO_API_KEY ... primaryEnv: SENSEAUDIO_API_KEY
Recommendation

Use a dedicated or limited-scope SenseAudio API key if available, keep it secret, and revoke or rotate it if exposed.

What this means

The agent may create JSON and MP3 files in the working directory while synthesizing the story.

Why it was flagged

The skill documents local command-line use to call an external API and write output files. This is central to generating audio and is not hidden.

Skill content
curl -s -X POST https://api.senseaudio.cn/v1/t2a_v2 ... -o "${OUTFILE}.json" ... xxd -r -p > "$OUTFILE"
Recommendation

Run it from a suitable working folder and review filenames/output locations if you want to keep generated files organized.

What this means

Story text, and any personal details the user includes in the story prompt, may be sent to SenseAudio for audio generation.

Why it was flagged

Generated story text is sent to the SenseAudio API for speech synthesis. This provider data flow is disclosed and purpose-aligned.

Skill content
"text": "$TEXT" ... curl -s -X POST https://api.senseaudio.cn/v1/t2a_v2
Recommendation

Avoid including sensitive personal information in story prompts unless you are comfortable sending it to the TTS provider.