📦 Azure Ai Voicelive Py — 实时语音AI
v0.1.0基于 Azure AI Voice Live SDK 的 Python 实时双向语音通信方案，可快速构建语音助手、语音聊天机器人、实时语音翻译、语音驱动虚拟形象等 WebSocket 音频流应用，内置 Server VAD、轮流对话、函数调用、MCP 工具与转写功能。
2· 2.1k·0 当前·0 累计
by @thegovind下载技能包
最后更新
2026/2/27
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This skill appears to be legitimate documentation for using Azure's Voice Live SDK, but the package metadata does not declare the environment variables and credential access that the SKILL.md actually requires. Before installing or running code derived from this skill:
- Treat the mismatch as a red flag: confirm with the skill author/source why required env vars and credentials are not declared. Ask for an authoritative homepage or repository.
- Do not expose broad Azure credentials (AZURE_CL...详细分析 ▾
⚠ 用途与能力
The SKILL.md describes building real-time voice apps with Azure's Voice Live SDK (logical and coherent). However the registry metadata declares no required environment variables or primary credential even though the instructions explicitly require AZURE_COGNITIVE_SERVICES_ENDPOINT and optionally AZURE_COGNITIVE_SERVICES_KEY and recommend DefaultAzureCredential. The missing declared credentials is disproportionate to the documented purpose (likely an oversight, but it is an incoherence).
⚠ 指令范围
Runtime instructions instruct the agent to read environment variables (endpoint, optional API key) and to use DefaultAzureCredential which may surface additional Azure credentials (AZURE_CLIENT_ID/TENANT_ID/CLIENT_SECRET, Azure CLI tokens, managed identity). The examples also read local audio files and stream microphone audio (expected for the stated purpose). The problem is the instructions access credentials and auth surfaces that are not declared in the skill metadata, granting the agent potential access to broader Azure credentials than the registry advertises.
✓ 安装机制
This is an instruction-only skill with no install spec or shipped code — lowest install risk. The SKILL.md recommends installing pip packages (azure-ai-voicelive, aiohttp, azure-identity), which is expected for this SDK and would be a normal developer dependency, but those installs would happen outside the skill bundle.
⚠ 凭证需求
The skill's documentation requires AZURE_COGNITIVE_SERVICES_ENDPOINT and optionally AZURE_COGNITIVE_SERVICES_KEY, and suggests DefaultAzureCredential (which uses other Azure auth sources). Yet the skill metadata lists no required env vars or primary credential. Requesting (via instructions) broad Azure credential sources without declaring them is disproportionate and opaque; it could cause unexpected use of existing Azure credentials on the host.
✓ 持久化与权限
always:false and no install code or persistent modifications are requested. The skill is user-invocable and can be invoked autonomously (platform default), but there's no evidence it requests persistent elevated privileges or modifies other skills.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.1.02026/1/31
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install azure-ai-voicelive-py
镜像加速npx clawhub@latest install azure-ai-voicelive-py --registry https://cn.longxiaskill.com