🎥 Video Chat With Me — 实时AI视频通话
v1.1.0通过OpenClaw agent实现的实时AI视频聊天：用Groq Whisper云端转语音，edge-tts云端文字转语音，OpenClaw chatCompletions API对话。Agent可看到摄像头画面、听到声音，并以自身个性与记忆回应。需GROQ_API_KEY，读取~/.openclaw/openclaw.json获取网关端口与令牌。音频→Groq云STT，文本→微软云TTS，摄像头帧+文本→OpenClaw网关→配置的LLM（若用云LLM则帧流出本机）。可选安装持久launchd服务。唤醒语含中英文“video chat”“语音”“视频一下”等。
0· 1.1k·2 当前·2 累计
by @sxu75374下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This skill's functionality matches its description, but it carries elevated privacy and privilege implications. Before installing: 1) Note the source is unknown and there's no homepage—exercise caution. 2) Review server.py and setup.sh yourself (they are included) — verify exactly how the OpenClaw gateway token is read/used. 3) Understand that the skill reads your GROQ key and the OpenClaw gateway auth token (from ~/.openclaw/openclaw.json) — that gateway token grants access to the agent's memor...详细分析 ▾
✓ 用途与能力
Name/description match the actual behavior: python+ffmpeg server that sends audio to Groq Whisper (GROQ_API_KEY) and routes camera frames/text to the OpenClaw gateway for chatCompletions. Declared required binaries and config (gateway.http) align with these needs. Minor concern: source/homepage missing which reduces trust.
ℹ 指令范围
SKILL.md and scripts instruct the agent to read ~/.openclaw/openclaw.json and ~/.openclaw/secrets/groq_api_key.txt, run setup.sh, install Python deps and mkcert, generate certs, and start a FastAPI server that encodes camera frames as base64 and POSTs them to the gateway. All of this is coherent with the stated purpose but grants the skill broad access to camera frames, microphone audio, and your agent session.
ℹ 安装机制
No centralized install spec, but included setup.sh will install Python packages via pip, use brew to install ffmpeg/mkcert if available, generate local certs, and write a launchd plist. These are common but modify the system (LaunchAgents, pip installs). There are no suspicious remote download URLs in the provided scripts.
⚠ 凭证需求
GROQ_API_KEY is expected. The skill reads the OpenClaw gateway auth token from ~/.openclaw/openclaw.json (not declared as an env var) and uses it to call /v1/chat/completions as the main agent. That token effectively gives the skill access to the agent's full memory, personality, and tools — a high‑privilege credential that has broad consequences if misused.
⚠ 持久化与权限
setup.sh optionally installs a LaunchAgent that auto-starts the HTTP server (persistent, starts at login). Persistent service combined with reading the gateway token and sending camera frames to the agent increases risk: the service could be triggered without explicit user action and route sensitive data to a cloud LLM if the gateway forwards externally.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.1.02026/2/12
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install videochat-withme
镜像加速npx clawhub@latest install videochat-withme --registry https://cn.longxiaskill.com