Elevenlabs Tts
PassAudited by ClawScan on May 1, 2026.
Overview
The artifacts describe a coherent ElevenLabs text-to-speech helper, with expected but important notes around API-key use, external ElevenLabs processing, ffmpeg/local execution, and voice-message tooling.
This skill appears purpose-aligned for ElevenLabs TTS. Before installing, make sure you trust the skill source, protect your ElevenLabs API key, install ffmpeg from a trusted source if needed, monitor API quota usage, and confirm any generated WhatsApp or other voice messages before sending.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may use local audio-conversion commands and voice-message tooling as part of TTS workflows.
The skill allows local execution and messaging/TTS tools. ffmpeg conversion and voice-message workflows fit the stated purpose, but these tools should stay limited to user-requested audio generation and delivery.
allowed-tools: [exec, tts, message] ... **ffmpeg**: Required for audio format conversion (MP3 → Opus for WhatsApp compatibility).
Use this only for requested text/audio, keep command use limited to ffmpeg conversion, and confirm recipient/content before any outbound message action.
If exposed or misused, the API key could allow unwanted ElevenLabs usage or quota consumption.
The skill requires an ElevenLabs credential. This is expected for a TTS provider integration, but the key grants access to the user's ElevenLabs account/API quota.
**ElevenLabs API Key** (`ELEVENLABS_API_KEY`): Required. ... Configure in `openclaw.json` under `messages.tts.elevenlabs.apiKey`.
Store the key securely, avoid committing openclaw.json with real secrets, and rotate the key if it is shared accidentally.
Text submitted for speech generation may be processed outside the local agent by ElevenLabs.
The TTS workflow necessarily sends text to the external ElevenLabs service for synthesis. This is purpose-aligned and disclosed, but it is still a privacy-relevant provider data flow.
Generate realistic AI voices using ElevenLabs API.
Do not submit sensitive or confidential text unless you are comfortable with ElevenLabs processing it under its terms.
The skill may fail or prompt manual setup if ffmpeg is missing; installing ffmpeg from an untrusted source would create avoidable local risk.
The skill declares a purpose-aligned external binary requirement, while the provided registry/install summary shows no install spec and no required binaries. Users may need to verify and install ffmpeg separately.
**ffmpeg**: Required for audio format conversion (MP3 → Opus for WhatsApp compatibility).
Install ffmpeg only from a trusted package manager or official source, and treat the registry metadata mismatch as a setup note.