Alicloud Ai Audio Tts Voice Clone

Voice cloning workflows with Alibaba Cloud Model Studio Qwen TTS VC models. Use when creating cloned voices from sample audio and synthesizing text with clon...

Security Scan

The skill's instructions generally match a Qwen TTS voice-cloning integration, but its metadata omits a required API credential and it asks you to install an external pip package (dashscope) that isn't declared — this mismatch and undeclared dependency warrant caution.

Purpose & Capability

The name and description describe Alibaba Cloud Qwen TTS voice cloning and the SKILL.md instructs installing a cloud SDK and using an API key or Alibaba credentials, which is coherent for that purpose. However, the registry metadata declares no required environment variables or primary credential while the instructions explicitly require DASHSCOPE_API_KEY or ~/.alibabacloud/credentials — an inconsistency.

Instruction Scope

The SKILL.md stays within the voice-clone scope: it instructs creating a venv, installing a SDK, preparing request JSON, running a read-only connectivity check, performing the operation, and saving outputs. It does not instruct reading unrelated system files or exfiltrating data. The only access outside the skill's domain is the optional ~/.alibabacloud/credentials file (appropriate for cloud credentials).

Install Mechanism

There is no formal install spec in the registry (instruction-only), but SKILL.md requires 'python -m pip install dashscope'. Using pip is typical for Python SDKs, but the package 'dashscope' is not otherwise referenced in metadata and its provenance is unknown here — this is a moderate risk and worth verifying (is it an official Alibaba package or third-party wrapper?).

Credentials

The runtime instructions require DASHSCOPE_API_KEY or adding credentials to ~/.alibabacloud/credentials, which is appropriate for calling Alibaba Cloud APIs. However, the skill metadata lists no required env vars or primary credential, creating a missing-declaration problem. The requested secrets themselves (API key or standard Alibaba credentials) are proportional to the stated purpose, but the omission in metadata reduces transparency.

Persistence & Privilege

The skill is instruction-only, has no install spec that writes system files, does not request 'always: true', and does not declare changes to other skills or system-wide config. It asks you to persist voice_id locally (reasonable for reuse) and to save outputs under an output/ path which is expected behavior.

What to consider before installing

This skill appears to implement Alibaba Cloud Qwen TTS voice cloning, but there are a few things to check before installing: (1) The SKILL.md requires an API key (DASHSCOPE_API_KEY) or entries in ~/.alibabacloud/credentials, yet the registry metadata does not declare any required credentials — ask the publisher to add a primaryEnv and list required env vars. (2) The instructions call for pip installing 'dashscope' — verify that 'dashscope' is an official/expected SDK (check PyPI, the maintainer, and project homepage) before installing, and prefer creating an isolated virtualenv as recommended. (3) Confirm you are comfortable providing Alibaba Cloud credentials to any code that will use them and that you have consent for cloning any voice samples. (4) Optionally review the pip package source or run the helper script in a sandbox to inspect behavior. If the publisher clarifies the missing metadata and the dashscope package provenance checks out, the skill's behavior appears coherent with its stated purpose.

Category: provider

Model Studio Qwen TTS Voice Clone

Use voice cloning models to replicate timbre from enrollment audio samples.

Critical model names

Use one of these exact model strings:

• qwen3-tts-vc-2026-01-22
• qwen3-tts-vc-realtime-2026-01-15

Prerequisites

• Install SDK in a virtual environment:

python3 -m venv .venv
. .venv/bin/activate
python -m pip install dashscope

• Set DASHSCOPE_API_KEY in your environment, or add dashscope_api_key to ~/.alibabacloud/credentials.

Normalized interface (tts.voice_clone)

Request

• text (string, required)
• voice_sample (string | bytes, required) enrollment sample
• voice_name (string, optional)
• stream (bool, optional)

Response

• audio_url (string) or streaming PCM chunks
• voice_id (string)
• request_id (string)

Operational guidance

• Use clean speech samples with low background noise.
• Respect consent and policy requirements for cloned voices.
• Persist generated voice_id and reuse for future synthesis requests.

Local helper script

Prepare a normalized request JSON and validate response schema:

.venv/bin/python skills/ai/audio/alicloud-ai-audio-tts-voice-clone/scripts/prepare_voice_clone_request.py \
  --text "Welcome to this voice-clone demo" \
  --voice-sample "https://example.com/voice-sample.wav"

Output location

• Default output: output/ai-audio-tts-voice-clone/audio/
• Override base dir with OUTPUT_DIR.

Validation

mkdir -p output/alicloud-ai-audio-tts-voice-clone
for f in skills/ai/audio/alicloud-ai-audio-tts-voice-clone/scripts/*.py; do
  python3 -m py_compile "$f"
done
echo "py_compile_ok" > output/alicloud-ai-audio-tts-voice-clone/validate.txt

Pass criteria: command exits 0 and output/alicloud-ai-audio-tts-voice-clone/validate.txt is generated.

Output And Evidence

• Save artifacts, command outputs, and API response summaries under output/alicloud-ai-audio-tts-voice-clone/.
• Include key parameters (region/resource id/time range) in evidence files for reproducibility.

Workflow

1. Confirm user intent, region, identifiers, and whether the operation is read-only or mutating.
2. Run one minimal read-only query first to verify connectivity and permissions.
3. Execute the target operation with explicit parameters and bounded scope.
4. Verify results and save output/evidence files.

References

• references/sources.md