📦 Parakeet — 鹦鹉
v1.3.2CliOffline 语音工具包：支持 25 种语言的离线语音转文字、文字转语音及语言检测，无需 API 密钥或云端。
0· 25·0 当前·0 累计
by 下载技能包
最后更新
2026/4/21
安全扫描
OpenClaw
安全
medium confidenceThe skill appears to do what it says (an offline local voice toolkit) and its runtime instructions are proportionate, but it relies on network installs/downloads and there are a few small metadata inconsistencies you should verify before installing.
评估建议
This skill looks coherent for an offline voice toolkit, but before installing: 1) Verify the upstream repository and npm package (github.com/drakulavich/kesha-voice-kit and the npm package page) and check release checksums or signatures if available; 2) Be aware 'kesha install' downloads large models (GBs) from public hosts (GitHub/HuggingFace) and will consume disk and network; 3) The README suggests installing bun via an install script (curl | bash) — prefer using distro-packaged installers or...详细分析 ▾
ℹ 用途与能力
The name/description (local, offline STT/TTS/language-detection) aligns with the instructions: they call a local CLI (kesha) and document installing models and a Rust engine. Requiring global npm/bun installs and model downloads is reasonable for this purpose. Minor inconsistency: the skill registry summary said "Required binaries: none" while the SKILL.md frontmatter declares requires.bins: [kesha] — the skill expects a kesha CLI to be present or installed via the documented steps.
✓ 指令范围
SKILL.md tells the agent to run kesha CLI commands (transcribe, say, --json, --ssml) and to run the documented installer (bun/npm + kesha install). The instructions do not ask the agent to read unrelated system files, environment variables, or send data to unknown endpoints. Note: 'kesha install' will download engine and models (large artifacts) from upstream (GitHub/HuggingFace) and requires network and disk access.
ℹ 安装机制
Installation is instruction-only (no packaged install spec in the registry), but SKILL.md recommends bun/npm global install of @drakulavich/kesha-voice-kit and running 'kesha install' which downloads engine/models. The sources referenced (GitHub releases, npm, HuggingFace, bun.sh) are public and expected for this project, but using 'curl | bash' (bun installer) and global npm installs carry standard supply-chain risks. Model downloads are large (~GB) and will be written to ~/.cache/kesha; they may be extracted to disk.
✓ 凭证需求
The skill declares no required environment variables or credentials and its instructions do not request secrets. This is proportionate to an on-device voice toolkit.
✓ 持久化与权限
The skill is not always-enabled and does not request elevated privileges. Install steps place artifacts in user cache and suggest system package manager installs for espeak-ng (brew/apt/choco) which are standard one-time system deps. The skill does not attempt to modify other skills or global agent settings beyond optional OpenClaw plugin instructions.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.3.22026/4/21
- Updated description and documentation to clarify multilingual support for both STT and TTS features. - Improved wording and examples for text-to-speech, highlighting usage of additional macOS system voices in multiple languages. - Revised trigger keywords and usage sections to emphasize multilingual voice and language detection capabilities. - No code changes — documentation update only.
● 无害
安装命令
点击复制官方npx clawhub@latest install kesha-voice-kit
镜像加速npx clawhub@latest install kesha-voice-kit --registry https://cn.longxiaskill.com