by 安全扫描
OpenClaw
安全
medium confidenceNULL
评估建议
This skill appears to do what it claims: it reads/writes ~/.openclaw/openclaw.json, may call the ElevenLabs API to list voices, and restarts the OpenClaw gateway. Before installing or running it: 1) review the two included shell scripts yourself (they are short and readable); 2) ensure you trust the skill source (there is no homepage/public repo listed); 3) note that it will overwrite your OpenClaw config but makes a backup at ~/.openclaw/openclaw.json.bak.voice-switch — verify that backup after...详细分析 ▾
✓ 用途与能力
Name/description say it switches ElevenLabs voices in OpenClaw. The scripts only read and update ~/.openclaw/openclaw.json, call the ElevenLabs voices endpoint when listing voices, and run `openclaw gateway restart`. Required binaries (bash, jq, openclaw) match the implementation. No unrelated credentials, hosts, or binaries are requested.
ℹ 指令范围
Runtime instructions and included scripts are narrowly scoped to listing ElevenLabs voices, editing messages.tts keys in ~/.openclaw/openclaw.json, making a backup, and restarting the gateway. These are intrusive filesystem and service actions (overwrite config + restart) but are coherent with the stated task. The scripts also perform network calls to api.elevenlabs.io to enumerate voices — expected for this purpose.
✓ 安装机制
This is an instruction-only skill with two small shell scripts and no install/download steps. Nothing is fetched from third-party URLs or written to nonstandard system-wide locations by an installer.
ℹ 凭证需求
The skill does not declare required environment variables, but the listing script will read ELEVENLABS_API_KEY and XI_API_KEY if present and the switch script can accept an API key argument and will write it into the config. Access to an ElevenLabs API key is proportional to listing voices and setting apiKey in the config, but the omission of these optional env vars from the metadata is a documentation gap the user should be aware of.
✓ 持久化与权限
The skill does not request permanent or platform-wide privileges (always:false). It modifies only the user's OpenClaw config (~/.openclaw/openclaw.json), creates a local backup, and restarts the gateway — actions required for its stated purpose and limited in scope. It does not alter other skills' configs.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/19
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install openclaw-tts-voice-switch
镜像加速npx clawhub@latest install openclaw-tts-voice-switch --registry https://cn.longxiaskill.com镜像同步中