How do I install the Webchat Voice Full Stack skill?

Run npx skillmds@latest add dvcrn/webchat-voice-full-stack in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Webchat Voice Full Stack safe to use?

This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: CAUTION, Skill Scanner: WARNING. Capability flags: executes scripts, makes network calls. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Webchat Voice Full Stack?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Webchat Voice Full Stack free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Webchat Voice Full Stack?

dvcrn (@dvcrn) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Webchat Voice Full Stack by dvcrn — Agent Skill

Name: Webchat Voice Full Stack
Rating: 4.2 (5 reviews)
Author: dvcrn

Webchat Voice Full Stack

One-step full-stack installer for OpenClaw WebChat voice input with local speech-to-text. Orchestrates three focused skills in order: local STT backend (faster-whisper-local-service), HTTPS/WSS reverse proxy (webchat-https-proxy), and voice UI mic controls (webchat-voice-gui). Includes Push-to-Talk, continuous recording shortcuts, VU meter, and localized UI (EN/DE/ZH). Designed for transparent, user-level deployment with explicit, reversible changes only (systemd user services, Control UI asset injection, gateway allowed-origin update). SHA256 integrity verification of all sub-skill scripts before execution — deployment aborts on any checksum mismatch. No external telemetry and no recurring API costs after initial model download. Keywords: voice input, microphone, WebChat, speech to text, STT, local transcription, whisper, full stack, one-click, voice button, push-to-talk, PTT, keyboard shortcut, i18n, HTTPS, WSS, integrity verification, checksum.

dvcrn Updated Sep 8, 2026 32 repo stars

File contents

WebChat Voice Full Stack

Meta-installer that orchestrates three standalone skills in the correct order:

faster-whisper-local-service — local STT backend (HTTP on 127.0.0.1:18790)
webchat-https-proxy — HTTPS/WSS reverse proxy for Control UI + WebSocket + transcription
webchat-voice-gui — mic button, VU meter, keyboard shortcuts, i18n for WebChat

Prerequisites

All three skills must be installed before running this meta-installer:

npx clawhub install faster-whisper-local-service
npx clawhub install webchat-https-proxy
npx clawhub install webchat-voice-gui

Additionally required on the system:

Python 3.10+
gst-launch-1.0 (GStreamer, from OS packages)
Internet access on first run (model download ~1.5 GB for medium)

Deploy

bash scripts/deploy.sh

Optional overrides (passed through to downstream scripts):

VOICE_HOST=10.0.0.42 VOICE_HTTPS_PORT=8443 TRANSCRIBE_PORT=18790 WHISPER_LANGUAGE=auto bash scripts/deploy.sh

What this does (via downstream scripts)

This skill does not contain deployment logic itself. It calls deploy.sh from each sub-skill:

Step 1: faster-whisper-local-service

Creates Python venv, installs faster-whisper==1.1.1
Writes transcribe-server.py with input validation (magic-byte check, size limit)
Creates systemd user service openclaw-transcribe.service
Downloads model weights on first run (~1.5 GB for medium)

Step 2: webchat-https-proxy

Copies https-server.py to workspace
Adds HTTPS origin to gateway.controlUi.allowedOrigins
Creates systemd user service openclaw-voice-https.service
Auto-generates self-signed TLS cert (TLS 1.2+ enforced)

Step 3: webchat-voice-gui

Copies voice-input.js and injects <script> tag into Control UI
Installs gateway startup hook for update safety
Optional interactive language selection

For full details, security notes, and uninstall instructions, see each skill's SKILL.md.

Security posture (why these changes are expected)

This is a meta-installer, so it coordinates downstream skills and applies only the minimum required local changes:

Persistence: creates user-level systemd services so STT/proxy survive reboot (openclaw-transcribe, openclaw-voice-https)
UI enablement: injects one explicit <script> tag for voice-input.js in Control UI
Gateway compatibility: appends one HTTPS origin to gateway.controlUi.allowedOrigins

Safety characteristics:

all changes are documented and reversible via uninstall scripts
no root/sudo required (user scope only)
no hidden background tasks beyond documented services
no outbound telemetry or data exfiltration behavior

Integrity verification

Before executing any sub-skill script, deploy.sh verifies SHA256 checksums of all sub-skill scripts against scripts/checksums.sha256. If any script was modified after installation (e.g. by a registry update or tampering), deployment aborts with a clear error.

Workflow:

npx clawhub install <sub-skill> — fetch from registry
Audit the scripts manually or via code review
bash scripts/rehash.sh — record trusted checksums
bash scripts/deploy.sh — verify checksums, then deploy

Dry-run verification (no deployment):

VERIFY_ONLY=true bash scripts/deploy.sh

After a sub-skill update:

Review the changed scripts
bash scripts/rehash.sh to update the trusted baseline
Commit the updated checksums.sha256

Verify

bash scripts/status.sh

Uninstall

Uninstall each skill separately (in reverse order):

# 1. Voice GUI (hook, UI injection, workspace files)
bash skills/webchat-voice-gui/scripts/uninstall.sh

# 2. HTTPS Proxy (service, gateway config, certs)
bash skills/webchat-https-proxy/scripts/uninstall.sh

# 3. STT Backend (service, venv)
systemctl --user stop openclaw-transcribe.service
systemctl --user disable openclaw-transcribe.service
rm -f ~/.config/systemd/user/openclaw-transcribe.service
systemctl --user daemon-reload

Notes

This meta-skill is a convenience wrapper. All actual logic lives in the three sub-skills.
Review each sub-skill's scripts and security notes before running.
The WORKSPACE and SKILLS_DIR paths are configurable via environment variables.

---name: webchat-voice-full-stackdescription: One-step full-stack installer for OpenClaw WebChat voice input with local speech-to-text. Orchestrates three focused skills in order: local STT backend (faster-whisper-local-service), HTTPS/WSS reverse proxy (webchat-https-proxy), and voice UI mic controls (webchat-voice-gui). Includes Push-to-Talk, continuous recording shortcuts, VU meter, and localized UI (EN/DE/ZH). Designed for transparent, user-level deployment with explicit, reversible changes only (systemd user services, Control UI asset injection, gateway allowed-origin update). SHA256 integrity verification of all sub-skill scripts before execution — deployment aborts on any checksum mismatch. No external telemetry and no recurring API costs after initial model download. Keywords: voice input, microphone, WebChat, speech to text, STT, local transcription, whisper, full stack, one-click, voice button, push-to-talk, PTT, keyboard shortcut, i18n, HTTPS, WSS, integrity verification, checksum.---# WebChat Voice Full StackMeta-installer that orchestrates three standalone skills in the correct order:1. **`faster-whisper-local-service`** — local STT backend (HTTP on 127.0.0.1:18790)2. **`webchat-https-proxy`** — HTTPS/WSS reverse proxy for Control UI + WebSocket + transcription3. **`webchat-voice-gui`** — mic button, VU meter, keyboard shortcuts, i18n for WebChat## PrerequisitesAll three skills must be installed before running this meta-installer:```bashnpx clawhub install faster-whisper-local-servicenpx clawhub install webchat-https-proxynpx clawhub install webchat-voice-gui```Additionally required on the system:- Python 3.10+- `gst-launch-1.0` (GStreamer, from OS packages)- Internet access on first run (model download ~1.5 GB for `medium`)## Deploy```bashbash scripts/deploy.sh```Optional overrides (passed through to downstream scripts):```bashVOICE_HOST=10.0.0.42 VOICE_HTTPS_PORT=8443 TRANSCRIBE_PORT=18790 WHISPER_LANGUAGE=auto bash scripts/deploy.sh```## What this does (via downstream scripts)This skill does **not** contain deployment logic itself. It calls `deploy.sh` from each sub-skill:### Step 1: faster-whisper-local-service- Creates Python venv, installs `faster-whisper==1.1.1`- Writes `transcribe-server.py` with input validation (magic-byte check, size limit)- Creates systemd user service `openclaw-transcribe.service`- Downloads model weights on first run (~1.5 GB for medium)### Step 2: webchat-https-proxy- Copies `https-server.py` to workspace- Adds HTTPS origin to `gateway.controlUi.allowedOrigins`- Creates systemd user service `openclaw-voice-https.service`- Auto-generates self-signed TLS cert (TLS 1.2+ enforced)### Step 3: webchat-voice-gui- Copies `voice-input.js` and injects `<script>` tag into Control UI- Installs gateway startup hook for update safety- Optional interactive language selectionFor full details, security notes, and uninstall instructions, see each skill's SKILL.md.## Security posture (why these changes are expected)This is a **meta-installer**, so it coordinates downstream skills and applies only the minimum required local changes:- **Persistence:** creates user-level systemd services so STT/proxy survive reboot (`openclaw-transcribe`, `openclaw-voice-https`)- **UI enablement:** injects one explicit `<script>` tag for `voice-input.js` in Control UI- **Gateway compatibility:** appends one HTTPS origin to `gateway.controlUi.allowedOrigins`Safety characteristics:- all changes are documented and reversible via uninstall scripts- no root/sudo required (user scope only)- no hidden background tasks beyond documented services- no outbound telemetry or data exfiltration behavior### Integrity verificationBefore executing any sub-skill script, `deploy.sh` verifies SHA256 checksums of **all** sub-skill scripts against `scripts/checksums.sha256`. If any script was modified after installation (e.g. by a registry update or tampering), deployment **aborts** with a clear error.**Workflow:**1. `npx clawhub install <sub-skill>` — fetch from registry2. Audit the scripts manually or via code review3. `bash scripts/rehash.sh` — record trusted checksums4. `bash scripts/deploy.sh` — verify checksums, then deploy**Dry-run verification** (no deployment):```bashVERIFY_ONLY=true bash scripts/deploy.sh```**After a sub-skill update:**1. Review the changed scripts2. `bash scripts/rehash.sh` to update the trusted baseline3. Commit the updated `checksums.sha256`## Verify```bashbash scripts/status.sh```## UninstallUninstall each skill separately (in reverse order):```bash# 1. Voice GUI (hook, UI injection, workspace files)bash skills/webchat-voice-gui/scripts/uninstall.sh# 2. HTTPS Proxy (service, gateway config, certs)bash skills/webchat-https-proxy/scripts/uninstall.sh# 3. STT Backend (service, venv)systemctl --user stop openclaw-transcribe.servicesystemctl --user disable openclaw-transcribe.servicerm -f ~/.config/systemd/user/openclaw-transcribe.servicesystemctl --user daemon-reload```## Notes- This meta-skill is a convenience wrapper. All actual logic lives in the three sub-skills.- Review each sub-skill's scripts and security notes before running.- The `WORKSPACE` and `SKILLS_DIR` paths are configurable via environment variables.

Frequently asked questions