Enables local voice chat by embedding Hotbutter relay server and PWA, providing speech-to-text and text-to-speech via a secure, self-hosted connection.
Security Analysis
high confidenceThe skill's code, instructions, and requirements are internally consistent: it connects to the hosted relay (hotbutter.ai), runs the local openclaw CLI for each voice turn, and forwards transcripts/responses through the relay as described.
Name/description claim a hosted relay voice bridge. The package only requires the local 'openclaw' CLI and includes code that opens a WebSocket to a relay and invokes 'openclaw agent' — these are exactly what the feature needs.
SKILL.md and the JS code consistently state that transcribed speech and agent stdout are sent via the relay. The runtime does not read unrelated files or environment variables; it only stores a small config at ~/.hotbutter and prompts for an optional email. The agent invocation uses execFile (no shell) and captures stdout as the message to relay.
There is no formal install spec in the registry (lowest-risk), but index.html contains an example curl | tar command that would download code from hotbutter.ai. That external download is outside the registry install metadata — if users follow it they should verify the remote host. The packaged code itself has no obfuscated downloads.
The skill requests no environment variables or external credentials and only writes a local config (~/.hotbutter). That matches its functionality. No unrelated credentials or config paths are requested.
always:false and user-invocable:true. The skill only stores an optional email locally and does not alter other skills or system-wide agent settings.
Guidance
This skill intentionally routes transcribed speech and the agent's stdout through the hosted relay at wss://hotbutter.ai; that behavior is explicit in SKILL.md and the code. Only install/run it if you are comfortable that agent output may pass through that server. If you need privacy, use the documented --relay-url option to point to a relay you control or use the fully-local hotbutter-os project. Be cautious about following the index.html curl | tar example — that would download code from hotbutter.ai; verify the source before running. Finally, audit what your local 'openclaw' agent prints (it may include secrets), and avoid running agents that output sensitive data while this bridge is active.
Latest Release
v1.0.6
Initial public release of the Hotbutter voice chat skill (hosted relay): - Connects local agents to voice chat via the hotbutter.ai relay. - Transcribes speech in the browser and sends only text (not audio) through the relay. - Runs the openclaw agent CLI locally in response to each message. - Configurable relay URL and agent display name for privacy/personalization. - On first run, optionally collects email for setup; all data except transcripts and responses stays local.
Popular Skills
Published by @michael-stajer on ClawHub
