Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Fish Audio

v1.0.0

Generate AI audio and synthesize voices with Fish Audio via AceDataCloud API. Use when creating text-to-speech audio, synthesizing voices, or generating audi...

0· 146·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for germey/acedatacloud-fish-audio.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Fish Audio" (germey/acedatacloud-fish-audio) from ClawHub.
Skill page: https://clawhub.ai/germey/acedatacloud-fish-audio
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install acedatacloud-fish-audio

ClawHub CLI

Package manager switcher

npx clawhub@latest install acedatacloud-fish-audio
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name/description (Fish Audio, AceDataCloud TTS/voice synthesis) align with the instructions and endpoints in SKILL.md. The required functionality (POST /fish/audios, /fish/voices, task polling) is consistent with a text-to-speech/voice-cloning skill.
Instruction Scope
SKILL.md contains only API usage examples and parameters for TTS and voice cloning; it does not instruct the agent to read unrelated files, traverse system paths, or exfiltrate arbitrary data. It does rely on supplying reference audio via an external URL for voice cloning, which is expected for that workflow.
Install Mechanism
There is no install spec and no code files (instruction-only), so nothing will be written to disk by an installer. This is the lowest-risk install mechanism.
!
Credentials
SKILL.md clearly requires ACEDATACLOUD_API_TOKEN (example export and Authorization: Bearer usage), but the registry metadata lists no required env vars and no primary credential. That mismatch is disproportionate and ambiguous: the skill needs an API token but does not declare it. Also, source/homepage are missing, so you can't verify the token's required scope or where credentials will be used beyond the documented endpoints.
Persistence & Privilege
The skill is not always-enabled and does not request system persistence or elevated privileges. Autonomous invocation is allowed (platform default) but that alone is not a red flag here.
What to consider before installing
This skill appears to be a straightforward AceDataCloud TTS integration, but the registry metadata omitted the ACEDATACLOUD_API_TOKEN that SKILL.md instructs you to export. Before installing, verify the vendor and endpoints (api.acedata.cloud) — there is no homepage or source listed. Ask the publisher to update registry metadata to list ACEDATACLOUD_API_TOKEN as the primary credential and to provide a homepage/owner contact. Treat the API token like any secret: ensure it is scoped and revocable, and do not use highly privileged or shared credentials. If you plan to use voice-cloning, be aware it requires uploading or referencing voice samples (privacy/legal considerations). If you cannot confirm the publisher or metadata correction, consider not installing or restrict use to a disposable/scoped token and test in an isolated environment.

Like a lobster shell, security has layers — review code before you run it.

latestvk97c6rhesykfcp5af1qwdmpg0x83d13d
146downloads
0stars
1versions
Updated 1mo ago
v1.0.0
MIT-0

Fish Audio — Voice & Audio Synthesis

Generate AI audio and synthesize voices through AceDataCloud's Fish Audio API.

Authentication

export ACEDATACLOUD_API_TOKEN="your-token-here"

Quick Start

curl -X POST https://api.acedata.cloud/fish/audios \
  -H "Authorization: Bearer $ACEDATACLOUD_API_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"text": "Hello, this is a demonstration of AI voice synthesis."}'

Endpoints

EndpointPurpose
POST /fish/audiosGenerate audio from text or parameters
POST /fish/voicesVoice synthesis and cloning
POST /fish/tasksPoll task status

Workflows

1. Text-to-Speech

POST /fish/audios
{
  "text": "The quick brown fox jumps over the lazy dog.",
  "voice_id": "default"
}

2. Voice Synthesis with Custom Voice

POST /fish/voices
{
  "text": "Welcome to our platform.",
  "audio_url": "https://example.com/reference-voice.mp3"
}

Parameters

ParameterTypeDescription
textstringText to synthesize into speech
voice_idstringVoice model to use
audio_urlstringReference audio for voice cloning
speednumberSpeech speed multiplier

Task Polling

POST /fish/tasks
{"task_id": "your-task-id"}

Response

{
  "task_id": "abc123",
  "audio_url": "https://cdn.example.com/output.mp3",
  "success": true
}

Gotchas

  • Pricing is based on byte count of the generated audio
  • Voice cloning requires a clear reference audio sample
  • Text-to-speech supports multiple languages automatically
  • Use the /fish/voices endpoint for voice cloning workflows

Comments

Loading comments...