Voice Meme Maker

PassAudited by VirusTotal on May 11, 2026.

Overview

Type: OpenClaw Skill Name: meme Version: 1.0.0 The skill bundle provides a legitimate implementation for generating voice memes using the SenseAudio TTS API. The Python code in SKILL.md correctly handles API authentication via environment variables, sends requests to the official domain (api.senseaudio.cn), and saves the resulting audio files locally as described. No evidence of malicious intent, data exfiltration, or prompt injection was found.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Generating audio may consume the user's SenseAudio API quota or credits.

Why it was flagged

The skill authenticates to SenseAudio with a bearer API key, which is expected for a TTS integration and is declared as a prerequisite.

Skill content
API_KEY = os.environ["SENSEAUDIO_API_KEY"] ... "Authorization": f"Bearer {API_KEY}"
Recommendation

Use a dedicated SenseAudio API key with appropriate quota limits, and revoke or rotate it if you stop using the skill.

What this means

Anything provided as meme text may be processed by SenseAudio.

Why it was flagged

User-provided meme text is sent to the external SenseAudio TTS API so it can return generated audio.

Skill content
"text": text ... requests.post("https://api.senseaudio.cn/v1/t2a_v2", ... json=payload)
Recommendation

Avoid sending confidential or personal content unless you are comfortable with SenseAudio processing it.

What this means

Installing the dependency adds code from the Python package ecosystem to the environment.

Why it was flagged

The skill asks the user to install the Python `requests` package as a prerequisite; this is common and purpose-aligned, but it is still an external dependency.

Skill content
pip install requests
Recommendation

Install dependencies from a trusted Python package index in the intended environment, or use an environment where `requests` is already available.