Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
smart-voice-reply
v1.0.1用于语音回复和回复语音音色配置。Invoke when: (1) 用户需要进行语音回复 (2) 用户要求配置或创建新的音色 (3) 用户询问音色相关功能。
⭐ 0· 84·1 current·1 all-time
bydumpling_zzz@slbqc
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
high confidencePurpose & Capability
The declared primary credential (DASHSCOPE_API_KEY) and the included tts_cli.js that calls a Dashscope TTS endpoint are coherent with a voice/TTS skill. However the skill's docs/instructions instruct the agent to call 'skill-create' to create the skill if missing and to add persistent directives into the agent's USER.md to force voice replies — actions that are not necessary for a simple TTS runtime and indicate scope/persistence beyond the stated purpose. Also the CLI invokes 'ffmpeg' to transcode audio and the SKILL metadata does not declare required binaries (ffmpeg, openclaw CLI), which is an inconsistency.
Instruction Scope
SKILL.md and docs direct the agent to: run scripts/tts_cli.js, send media via 'openclaw message send', and—critically—modify the agent's USER.md (add preset scenarios and a directive to always load this skill and always return voice). The install doc explicitly tells the agent to call skill-create to create the skill and to inject configuration into USER.md. Instructing the agent to persistently change its configuration is scope creep and grants ongoing control over agent behavior.
Install Mechanism
No install spec (instruction-only) — low install risk because nothing is automatically downloaded or extracted. The package includes a local Node CLI script (scripts/tts_cli.js) rather than a fetched binary.
Credentials
Only one environment variable is required (DASHSCOPE_API_KEY), which matches the TTS API used in the code. That single-credential request is proportionate. Recommend confirming the API key's scope/permissions before providing it (e.g., whether it can access account data or other services).
Persistence & Privilege
Although always:false, the docs explicitly instruct the agent to modify USER.md so the agent will 'on dialogue start load smart-voice-reply' and 'on every reply return voice'. This effectively enforces persistent behavior without using the platform's proper 'always' flag and gives the skill indirect permanent influence over agent responses. The instruction to call 'skill-create' to create the skill if missing also asks the agent to change its own skillset.
What to consider before installing
This skill implements TTS against a Dashscope endpoint and legitimately needs a DASHSCOPE_API_KEY, but several things don't add up and you should be careful before installing:
- Persistence warning: The docs tell the agent to edit its USER.md to always load and always reply with voice, and to auto-create the skill if missing. That changes the agent's persistent behavior; avoid allowing automatic modification of USER.md or automatic skill-creation unless you trust the author and have reviewed the exact text being injected.
- Missing binary declarations: The included CLI calls external binaries (ffmpeg for transcoding and the 'openclaw' CLI to send messages) but the skill metadata does not declare these as required. Ensure ffmpeg and the OpenClaw CLI are installed from trusted sources and understand that the skill will attempt to execute them.
- API key safety: Only provide DASHSCOPE_API_KEY if you trust the Dashscope endpoint and the key's permissions. Consider creating a limited-scope key, and be prepared to rotate/revoke it if needed. Verify the endpoint (dashscope.aliyuncs.com) is expected for your environment.
- Data/privacy: Audio/text sent to the TTS API will leave your environment. If replies might include sensitive content, review privacy/retention policies of the TTS provider.
- Mitigations: Ask the author to remove instructions that auto-edit USER.md and to rely on normal installation/permission flows; require a prompt/consent before any persistent changes; update SKILL.md to list required binaries (ffmpeg, openclaw) and to clearly describe what 'skill-create' does. If you still want to test it, run in a sandboxed agent instance with a limited API key and refuse or review any automatic writes to persistent agent files.scripts/tts_cli.js:118
Environment variable access combined with network send.
Patterns worth reviewing
These patterns may indicate risky behavior. Check the VirusTotal and OpenClaw results above for context-aware analysis before installing.Like a lobster shell, security has layers — review code before you run it.
latestvk976453jtj2b3cs99g8eqrkps1841b2m
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
EnvDASHSCOPE_API_KEY
Primary envDASHSCOPE_API_KEY