Chinese TTS

PassAudited by ClawScan on May 1, 2026.

Overview

This skill appears to do what it claims—turn Chinese text into a Feishu voice message—while relying on external/local TTS tooling and Feishu delivery.

This skill looks coherent and purpose-aligned. Before installing, make sure you are comfortable with Chinese text being converted by Edge TTS and sent through Feishu, verify the local edge-tts and ffmpeg binaries are trusted, and use it only when you intend to send an audio message.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Text you ask it to read aloud, and the generated audio, may be processed by Microsoft Edge TTS and delivered through Feishu.

Why it was flagged

This discloses a third-party data flow: user-provided text is used for TTS generation and the resulting audio is sent through Feishu. That is expected for the skill, but it matters for privacy.

Skill content
Generate natural Chinese speech using Microsoft Edge TTS and send as Feishu voice messages.
Recommendation

Use it only for content you are comfortable sending through those services, and avoid secrets or highly sensitive text.

What this means

If invoked, the agent may send an audio message to the active Feishu destination rather than just generating a local file.

Why it was flagged

The skill instructs the agent to send a Feishu voice message using the connected messaging context. This matches the stated purpose but is still an external account/action boundary.

Skill content
message(asVoice=true, contentType="audio/ogg", filePath="/home/node/.openclaw/workspace/output.opus", filename="output.opus")
Recommendation

Confirm the intended recipient/chat and content before using the skill for messages.

What this means

The skill's behavior depends on local executables that are not pinned or declared in the provided metadata.

Why it was flagged

The helper depends on local edge-tts and ffmpeg binaries, while the registry metadata declares no required binaries or install spec. This is purpose-aligned but leaves dependency provenance/versioning unstated.

Skill content
/home/clawpi/.local/bin/edge-tts --voice "$VOICE" --text "$TEXT" --write-media "$TMP_MP3"; ffmpeg -i "$TMP_MP3" -c:a libopus -b:a 64k -ar 48000 "$OUTPUT" -y -loglevel error
Recommendation

Verify edge-tts and ffmpeg are installed from trusted sources; the skill metadata should ideally declare these dependencies.