Mic Recorder

ReviewAudited by ClawScan on May 10, 2026.

Overview

The skill clearly records microphone audio and sends it to Feishu, but it depends on a pre-authorized local Automator app that is not included or reviewable in the provided artifacts.

Install or use this only if you created and trust the local RecordMic.app, have verified its Automator/FFmpeg contents, and are comfortable with microphone recordings being copied into the workspace and sent to Feishu. Require explicit approval before each recording and upload.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If the local app is not exactly what the user expects, invoking the skill could run unreviewed code that records private speech or background audio.

Why it was flagged

The skill’s main recording action executes a pre-existing Automator app with microphone permission. The supplied artifact set contains only SKILL.md and no install spec/code for this app, so its contents and provenance cannot be verified.

Skill content
应用位置:`~/.openclaw/tools/RecordMic.app` ... `open -W ~/.openclaw/tools/RecordMic.app` ... `已授权麦克风权限`
Recommendation

Only use it after verifying the Automator workflow/source and the FFmpeg command inside RecordMic.app. The package should declare this helper and ideally include reviewable setup/source instructions.

What this means

Audio may be posted through the user’s or workspace’s Feishu integration.

Why it was flagged

The skill uses the configured Feishu messaging channel to send the recording, which means it relies on existing account or workspace messaging authority.

Skill content
message(action="send", channel="feishu", media="~/.openclaw/workspace/recording_latest.wav", caption="录音已降噪处理")
Recommendation

Confirm the Feishu account, destination, and recipient before sending recordings, and avoid granting broader messaging access than needed.

What this means

Private conversations, bystander speech, or background sounds could be shared outside the local device.

Why it was flagged

The skill explicitly captures voice/background audio and sends it to an external Feishu channel. This is purpose-aligned, but it crosses a sensitive data boundary.

Skill content
description: 麦克风录音并发送音频到飞书。涵盖语音和背景音。
Recommendation

Use only in appropriate environments, get consent where needed, and delete local workspace recordings after sending if they are no longer required.