Dlazy Doubao Tts

Synthesize text into natural and fluent speech using Doubao TTS.

Security Scan

The skill appears to do what it says (call the dLazy Doubao TTS API via a CLI), but there are small inconsistencies (missing declared API credential, version/pin mismatches, and metadata-based install instructions) that you should review before installing or granting access to sensitive files/keys.

Purpose & Capability

Name/description match the instructions: this is a thin CLI client for dLazy Doubao TTS. Requiring npm/npx to run or install the CLI is reasonable. Minor mismatch: the SKILL.md instructs use of an API key (dlazy auth / DLAZY_API_KEY) but the registry metadata lists no required environment variables or primary credential.

Instruction Scope

SKILL.md directs the agent to run the dlazy doubao-tts CLI which sends prompts and uploads user-specified local media to api.dlazy.com / oss.dlazy.com. The instructions do not ask the agent to read arbitrary system files or exfiltrate unrelated data; file uploads are only for user-supplied paths. The file upload behavior and API endpoints are clearly documented.

Install Mechanism

There is no formal install spec in the registry, but the SKILL.md metadata recommends npm install -g @dlazy/cli@1.0.6 or npx @dlazy/cli@1.0.6. Using npm/npx for an npm-hosted CLI is normal and lower risk than arbitrary downloads. Minor issue: skill/version strings are inconsistent (SKILL headers vs registry metadata vs pinned CLI version), which merits review before installing a global package.

Credentials

The instructions require a dLazy API key (and mention storing it in ~/.dlazy/config.json or via DLAZY_API_KEY), but the skill's declared required env vars / primaryEnv are empty. The skill will store credentials in the user's config directory and will upload provided media to oss.dlazy.com — these are expected for a cloud TTS client but should be explicitly declared. The omission of an explicit declared credential is an incoherence to review.

Persistence & Privilege

always is false and the skill does not request system-wide privileges. The CLI will write its own config (~/.dlazy/config.json) to store the API key, which is normal for a user-scoped CLI. No evidence the skill modifies other skills or system-wide agent settings.

What to consider before installing

This skill is a thin wrapper around the dLazy CLI and requires a dLazy API key to work. Before installing or using it: 1) Confirm the CLI source (github.com/dlazyai/cli) and the exact npm package/version you plan to run (the SKILL.md references 1.0.6 while other headers show different versions). 2) Understand that any local audio/image/video files you pass will be uploaded to oss.dlazy.com — do not pass sensitive files you don't want uploaded. 3) The skill's metadata mentions storing your API key under ~/.dlazy/config.json (or via DLAZY_API_KEY); ensure you are comfortable with that storage and rotate keys if needed. 4) Because the registry metadata did not declare the API key as a required env var, double-check permission expectations and prefer running via npx (one-off) rather than a global npm install if you want to avoid persistence. If you need higher confidence, review the CLI GitHub source and the npm package code before installing.

English · 中文

Synthesize text into natural and fluent speech using Doubao TTS.

Trigger Keywords

• doubao tts
• text to speech
• generate speech
• voice broadcast

Authentication

All requests require a dLazy API key, configured through the CLI:

dlazy auth set YOUR_API_KEY

The CLI saves the key in your user config directory (~/.dlazy/config.json on macOS/Linux, %USERPROFILE%\.dlazy\config.json on Windows), with file permissions restricted to your OS user account. You can also supply the key per-invocation via the DLAZY_API_KEY environment variable.

Getting Your API Key

1. Sign in or create an account at dlazy.com
2. Go to dlazy.com/dashboard/organization/api-key
3. Copy the key shown in the API Key section

Each key is scoped to your dLazy organization and can be rotated or revoked at any time from the same dashboard.

About & Provenance

• CLI source code: github.com/dlazyai/cli
• Maintainer: dlazyai
• npm package: @dlazy/cli (pinned to 1.0.6 in this skill's install spec)
• Homepage: dlazy.com

You can install on demand without persisting a global binary by running:

npx @dlazy/cli@1.0.6 <command>

Or, if you prefer a global install, the skill's metadata.clawdbot.install field declares the exact pinned version (npm install -g @dlazy/cli@1.0.6). Review the GitHub source before installing.

How It Works

This skill is a thin client over the dLazy hosted API. When you invoke it:

• Prompts and parameters you provide are sent to the dLazy API endpoint (api.dlazy.com) for inference.
• Any local file paths you pass to image / video / audio fields are uploaded to dLazy's media storage (oss.dlazy.com) so the model can read them — the same flow as any cloud-based generation API.
• Generated output URLs returned by the API are hosted on oss.dlazy.com.

This is the standard SaaS pattern; the skill itself does not access network or filesystem resources beyond what the dLazy CLI already handles. See dlazy.com for the full service terms.

Usage

CRITICAL INSTRUCTION FOR AGENT: Run the dlazy doubao-tts command to get results.

dlazy doubao-tts -h

Options:
  --prompt <prompt>                    Prompt
  --voice_language <voice_language>    Voice Language [default: zh-cn] (choices: "zh-cn", "en")
  --voiceId <voiceId>                  Voice ID [default: zh_female_shuangkuaisisi_uranus_bigtts]
  --speed_ratio <speed_ratio>          Speed Ratio [default: 1.0] (choices: "0.8", "1.0", "1.2", "1.5", "2.0")
  --input <spec>                       JSON payload: inline string, @file, or - (stdin)
  --dry-run                            Print payload + cost estimate without calling API
  --no-wait                            Return generateId immediately for async tasks
  --timeout <seconds>                  Max seconds to wait for async completion (default: "1800")
  -h, --help                           display help for command

Output Format

{
  "ok": true,
  "kind": "urls",
  "data": {
    "urls": [
      "https://oss.dlazy.com/result.mp4"
    ]
  }
}

Command Examples

# basic call:
dlazy doubao-tts --prompt 'prompt text'

# complex call:
dlazy doubao-tts --prompt 'prompt text'

Error Handling

Code	Error Type	Example Message
401	Unauthorized (No API Key)	ok: false, code: "unauthorized", message: "API key is missing or invalid"
501	Missing required parameter	error: required option '--prompt <prompt>' not specified
502	Local file read error	Error: Image file/Video file not found: C:\path\to\your\file
503	API request failed (no balance)	ok: false, code: "insufficient_balance"
503	API request failed (server error)	HTTP status code error (500 server crash)
504	Asynchronous task execution failed	=== Generation Failed === / {Specific error reason returned by backend, for example "Prompt violates safety policy"}

AGENT CRITICAL INSTRUCTION:

1. If the execution result returns code: "insufficient_balance", you MUST explicitly inform the user that their credits are insufficient and guide them to recharge: https://dlazy.com/dashboard/organization/settings?tab=credits
2. If the execution result returns code: "unauthorized" or indicates missing API key, you MUST inform the user to get their API key from https://dlazy.com/dashboard/organization/api-key and save it using dlazy auth set <key> and resume the task.

Tips

Visit https://dlazy.com for more information.