Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Mambo TTS

v1.0.0

曼波音色 TTS 快速调用 - 活泼有活力的中文女声预设,基于 Edge TTS (zh-CN-XiaoyiNeural + pitch +8%)

0· 109·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for systiger/mambo-tts.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Mambo TTS" (systiger/mambo-tts) from ClawHub.
Skill page: https://clawhub.ai/systiger/mambo-tts
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install mambo-tts

ClawHub CLI

Package manager switcher

npx clawhub@latest install mambo-tts
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
The name/description indicate TTS presets and the code + README implement small helper scripts that call a separate edge-tts converter. The required capabilities (Node.js and the edge-tts skill) match the stated purpose. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
SKILL.md and README instruct running node scripts and reference the edge-tts tts-converter.js script; the included JS files simply spawn that script. Minor documentation inconsistencies exist: SKILL.md shows example ./mambo.sh/./xiaoyi.sh/./yunyang.sh which are not present (the repo provides mambo.js and xiaoyi.js). Also examples reference both the edge-tts/scripts path and mambo-tts/scripts; these are explainable but should be corrected. The runtime instructions do not ask to read unrelated files or exfiltrate data.
Install Mechanism
No install spec is provided (instruction-only plus small helper scripts). Nothing is downloaded or extracted by the skill itself. This is low-risk for installation.
Credentials
The skill declares no environment variables or credentials. The included code does not access environment secrets. It depends on a sibling edge-tts skill and the node-edge-tts library, which is coherent with the purpose.
Persistence & Privilege
The skill is not always-enabled and does not request persistence or modify other skills. It only invokes a child process and exits; no elevated privileges or system-wide changes are requested.
Assessment
This appears to be a small, benign helper that calls the edge-tts converter to apply voice presets. Before installing: (1) confirm you have the edge-tts skill (or the referenced scripts) available at the expected sibling path, (2) correct/inspect the missing shell scripts referenced in the docs (use the provided mambo.js/xiaoyi.js instead), (3) review the edge-tts skill (it will perform network calls to Microsoft/Edge TTS endpoints) so you trust that upstream behavior, and (4) because the skill source and homepage are unknown, consider inspecting the tts-converter.js and node-edge-tts usage in the edge-tts skill to ensure no unexpected network endpoints or credential usage.
scripts/mambo.js:20
Shell command execution detected (child_process).
scripts/xiaoyi.js:20
Shell command execution detected (child_process).
Patterns worth reviewing
These patterns may indicate risky behavior. Check the VirusTotal and OpenClaw results above for context-aware analysis before installing.

Like a lobster shell, security has layers — review code before you run it.

audiovk97fjmhfqskqm82p11k77xq4zx83heezchinesevk97fjmhfqskqm82p11k77xq4zx83heezlatestvk97fjmhfqskqm82p11k77xq4zx83heezttsvk97fjmhfqskqm82p11k77xq4zx83heezvoicevk97fjmhfqskqm82p11k77xq4zx83heez
109downloads
0stars
1versions
Updated 1mo ago
v1.0.0
MIT-0

曼波音色 TTS

概述

快速调用预设音色进行文本转语音,无需记忆复杂参数。

预设音色

预设名VoicePitchRate适用场景
曼波zh-CN-XiaoyiNeural+8%default活泼、有活力的内容
晓伊zh-CN-XiaoyiNeuraldefault+30%快节奏内容、新闻
晓晓zh-CN-XiaoxiaoNeuraldefaultdefault自然、通用
云扬zh-CN-YunyangNeuraldefault+10%旁白、纪录片

快速使用

方式 1:直接调用脚本

cd ~/.openclaw/workspace/skills/edge-tts/scripts

# 曼波音色
node tts-converter.js "你的文本" --voice zh-CN-XiaoyiNeural --pitch +8%

# 晓伊音色(快节奏)
node tts-converter.js "你的文本" --voice zh-CN-XiaoyiNeural --rate +30%

# 云扬音色(旁白)
node tts-converter.js "你的文本" --voice zh-CN-YunyangNeural --rate +10%

方式 2:使用便捷脚本

cd ~/.openclaw/workspace/skills/mambo-tts/scripts

# 曼波
./mambo.sh "你的文本"

# 晓伊
./xiaoyi.sh "你的文本"

# 云扬
./yunyang.sh "你的文本"

技术说明

  • 底层引擎:Microsoft Edge TTS(免费、无需 API Key)
  • 支持参数:pitch(音高)、rate(语速)、volume(音量)
  • 不支持:style_tag、intonation(这是 Azure SSML 功能)

输出

  • 默认格式:MP3
  • 默认保存位置:~/.openclaw/workspace/output/

依赖

  • Node.js 18+
  • node-edge-tts 包(已在 edge-tts skill 中安装)

参考

Comments

Loading comments...