Voice Wake Say TTS Responses (Native)

v0.1.0

Speak responses aloud on macOS using the built-in `say` command when user input indicates Voice Wake/voice recognition (for example, messages starting with "User talked via voice recognition on <device>").

2· 2.4k·12 current·12 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The skill's stated purpose (speaking responses on macOS using the built-in 'say' command) aligns with the runtime instructions. However, the metadata does not declare an OS restriction or list 'say' as a required binary — a mismatch: the skill will only work on macOS with the 'say' binary present.
Instruction Scope
The SKILL.md confines actions to checking the latest message for a precise trigger phrase and running a local 'printf | say' command; it does not instruct reading unrelated files or contacting external endpoints. It does reference optional environment variables (SAY_VOICE, SAY_RATE) that are not declared in the skill metadata. The strict requirement to only check the latest message and ignore context is unusual but not inherently malicious.
Install Mechanism
Instruction-only skill with no install steps and no code files — low installation risk (nothing is written to disk).
Credentials
The skill declares no required environment variables or credentials (appropriate for a local TTS helper). It nonetheless references optional env names (SAY_VOICE, SAY_RATE) in SKILL.md that are not declared; this is an inconsistency to be corrected but not by itself suspicious.
Persistence & Privilege
always is false and there is no install-time persistence or modification of other skills or system-wide configuration. Model invocation is allowed (normal); the skill can be called autonomously, but its trigger is narrowly scoped to a user message prefix.
What to consider before installing
This skill appears to do what it says (pipe text to macOS 'say') but it has small metadata/instruction mismatches you should fix or verify before installing: (1) confirm the agent will run on macOS (the skill assumes 'say' exists) — if the agent runs in the cloud or on Linux, the command will fail or do nothing; (2) ask the skill author to declare the required binary ('say') and an OS restriction in the metadata; (3) note that SKILL.md references optional env vars (SAY_VOICE, SAY_RATE) that are not declared — confirm whether you need to set them; (4) test in a safe environment to ensure audio is played where you expect (local speaker vs remote host) and that the trigger phrase behavior is acceptable; and (5) be aware that autonomous invocation is allowed by default — while the trigger is narrow, consider whether other skills or system messages could craft messages that accidentally trigger spoken output.

Like a lobster shell, security has layers — review code before you run it.

latestvk977xncdyp7e8w2268a69qthnx7zxdv6

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments