技能 voice-agent-expert

📦

voice-agent-expert

Name: voice-agent-expert
Author: EGAdams

内容修订 r1 高风险 📁 文件系统访问🌐 网络访问⚙️ 外部命令🔑 环境变量

排查 LiveKit Letta 语音代理问题

当音频、WebRTC、令牌和进程状态相互影响时，语音代理故障很难诊断。此技能为 LiveKit 和 Letta 调试提供聚焦的检查项、工作流和辅助脚本。

支持: Claude Codex Code(CC)

⚠️ 38 差

安装前请停下并请求确认。

请审查安装计划，并在更改文件前获得用户明确同意。

使用我的智能体安装

将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。

智能体请求

Review the Skillstore skill "voice-agent-expert" from https://skillstore.io/skills/egadams-voice-agent-expert.md and its manifest at https://skillstore.io/api/skills/egadams-voice-agent-expert/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

你的智能体仍应展示其计划，并按安全策略请求必要确认。

Agent 可读资源

当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。

Markdown 详情 GET /skills/egadams-voice-agent-expert.md 已签名 manifest GET /api/skills/egadams-voice-agent-expert/manifest 已签名 lockfile GET /api/skills/egadams-voice-agent-expert/lockfile

测试它

正在使用“voice-agent-expert”。我的语音代理加入了房间，但从不响应。

预期结果:

可能原因：重复的 voice-agent worker 或错误的 LiveKit hook。
确认只有一个 worker 处于活动状态，并且本地测试使用 DEV 模式。
检查日志中是否有证明 Letta 正在接收消息的路由标记。

正在使用“voice-agent-expert”。 playground 提示我的令牌无效。

预期结果:

生成新的 LiveKit 令牌，因为令牌会在数小时后过期。
确认 LiveKit URL 与浏览器使用的服务器端点一致。
将令牌视为敏感信息，避免共享包含令牌的日志。

正在使用“voice-agent-expert”。音频几秒后中断。

预期结果:

在更改模型或音频设置前，先检查是否存在重复的 voice-agent worker。
停止过期进程并清理过期房间后，干净地重启 worker。
验证当前处于活动状态的 worker 正是接收当前日志的那个。

安全审计

高风险

v8 • 2026/7/6 打开版本化报告

The skill appears intended for local LiveKit and Letta debugging, not covert exfiltration. Several findings are confirmed because helper scripts read .env files, handle API secrets, spawn shell commands, and start local services with hardcoded paths. Many markdown backtick and localhost URL findings are false positives, but the package needs hardening before broad marketplace distribution.

已扫描文件

685

分析行数

复核项

已忽略误报

已确认安全问题 (8)

高

scripts/diagnose_voice_system.py:68

Environment file access

livekit_env = Path("/home/adamsl/ottomator-agents/livekit-agent/.env")

The code references local .env files that can contain API keys and service credentials. Reading or exporting those files is sensitive behavior.

高

scripts/diagnose_voice_system.py:69

Environment file access

planner_env = Path("/home/adamsl/planner/.env")

The code references local .env files that can contain API keys and service credentials. Reading or exporting those files is sensitive behavior.

高

scripts/diagnose_voice_system.py:111

Environment file access

print("export $(grep -v '^#' /home/adamsl/ottomator-agents/livekit-agent/.env | xargs)")

The code references local .env files that can contain API keys and service credentials. Reading or exporting those files is sensitive behavior.

高

scripts/generate_token.py:9

Environment file access

env_file = Path("/home/adamsl/ottomator-agents/livekit-agent/.env")

The code references local .env files that can contain API keys and service credentials. Reading or exporting those files is sensitive behavior.

高

scripts/start_voice_system.py:61

Environment file access

env_file = Path("/home/adamsl/ottomator-agents/livekit-agent/.env")

The code references local .env files that can contain API keys and service credentials. Reading or exporting those files is sensitive behavior.

高

scripts/start_voice_system.py:71

Environment file access

planner_env = Path("/home/adamsl/planner/.env")

The code references local .env files that can contain API keys and service credentials. Reading or exporting those files is sensitive behavior.

高

SKILL.md:35-44 QUICK_REFERENCE.md:124-130

Broad Process Termination Instructions

The reset guidance tells users to kill LiveKit and voice-agent processes before restarting services. Broad process matching can disrupt unrelated local work if run without confirmation.

Both cited sections contain process-kill and restart guidance for local services. The commands are operationally plausible and not merely scanner artifacts.

中

scripts/generate_token.py:44-53

Connection Token Printed to Terminal

The token generator creates a LiveKit JWT and prints it directly to terminal output. This is useful for setup but can leak session access through copied logs.

The code directly creates a JWT and prints it under a token label. The behavior is intentional, but the token is still sensitive.

能力复核项 (32)

这些是真实的本地能力，对此技能可能是预期行为，因此需要复核，但不会按已确认恶意行为计分。

高

QUICK_REFERENCE.md:133

Hidden file in home directory

## 📝 Aliases (Add to ~/.bashrc)

The skill tells users to add aliases to ~/.bashrc. Shell startup files are persistence points, even though the shown aliases appear benign.

高

QUICK_REFERENCE.md:133

Hidden file access

## 📝 Aliases (Add to ~/.bashrc)

The skill tells users to add aliases to ~/.bashrc. Shell startup files are persistence points, even though the shown aliases appear benign.

高

scripts/diagnose_voice_system.py:11

Python subprocess.run

result = subprocess.run(cmd, shell=True, capture_output=True, text=True)

The helper executes shell command strings with shell=True. Current call sites are mostly fixed, but this is still a command-execution surface.

高

scripts/diagnose_voice_system.py:111

Shell command substitution

print("export $(grep -v '^#' /home/adamsl/ottomator-agents/livekit-agent/.env | xargs)")

The printed export command loads every variable from a .env file through shell substitution. That can expose secrets to the shell environment.

高

scripts/diagnose_voice_system.py:68

Hidden file access

livekit_env = Path("/home/adamsl/ottomator-agents/livekit-agent/.env")

The code references local .env files that can contain API keys and service credentials. Reading or exporting those files is sensitive behavior.

高

scripts/diagnose_voice_system.py:69

Hidden file access

planner_env = Path("/home/adamsl/planner/.env")

The code references local .env files that can contain API keys and service credentials. Reading or exporting those files is sensitive behavior.

高

scripts/diagnose_voice_system.py:111

Hidden file access

print("export $(grep -v '^#' /home/adamsl/ottomator-agents/livekit-agent/.env | xargs)")

The code references local .env files that can contain API keys and service credentials. Reading or exporting those files is sensitive behavior.

高

scripts/diagnose_voice_system.py:72

Generic API/secret keys

livekit_vars = ["LIVEKIT_URL", "LIVEKIT_API_KEY", "LIVEKIT_API_SECRET", "DEEPGRAM_API_KEY"]

The code handles named API keys or secrets for LiveKit, Deepgram, or OpenAI. These values are credentials and require explicit handling safeguards.

高

scripts/diagnose_voice_system.py:81

Generic API/secret keys

if check_env_var(planner_env, "OPENAI_API_KEY") or check_env_var(livekit_env, "OPENAI_API_KEY"):

The code handles named API keys or secrets for LiveKit, Deepgram, or OpenAI. These values are credentials and require explicit handling safeguards.

高

scripts/generate_token.py:9

Hidden file access

env_file = Path("/home/adamsl/ottomator-agents/livekit-agent/.env")

The code references local .env files that can contain API keys and service credentials. Reading or exporting those files is sensitive behavior.

高

scripts/generate_token.py:16

Python environment access

os.environ.setdefault(key, value)

The code references local .env files that can contain API keys and service credentials. Reading or exporting those files is sensitive behavior.

高

scripts/generate_token.py:27

Python environment access

api_key = os.environ.get('LIVEKIT_API_KEY')

The code references local .env files that can contain API keys and service credentials. Reading or exporting those files is sensitive behavior.

高

scripts/generate_token.py:28

Python environment access

api_secret = os.environ.get('LIVEKIT_API_SECRET')

The code references local .env files that can contain API keys and service credentials. Reading or exporting those files is sensitive behavior.

高

scripts/generate_token.py:27

Generic API/secret keys

api_key = os.environ.get('LIVEKIT_API_KEY')

The code references local .env files that can contain API keys and service credentials. Reading or exporting those files is sensitive behavior.

高

scripts/generate_token.py:28

Generic API/secret keys

api_secret = os.environ.get('LIVEKIT_API_SECRET')

The code references local .env files that can contain API keys and service credentials. Reading or exporting those files is sensitive behavior.

高

scripts/generate_token.py:31

Generic API/secret keys

if not api_key or not api_secret:

The code handles named API keys or secrets for LiveKit, Deepgram, or OpenAI. These values are credentials and require explicit handling safeguards.

高

scripts/generate_token.py:36

Generic API/secret keys

token = api.AccessToken(api_key, api_secret) \

The code handles named API keys or secrets for LiveKit, Deepgram, or OpenAI. These values are credentials and require explicit handling safeguards.

高

scripts/start_voice_system.py:14

Python subprocess.run

result = subprocess.run(

The startup helper checks ports through shell=True and shell pipelines. The current port values are fixed, but the command-execution pattern remains risky.

高

scripts/start_voice_system.py:95

Python os.exec variants

os.execv(

The script replaces itself with a hardcoded local Python executable and voice-agent file. That starts external code after loading environment secrets.

高

scripts/start_voice_system.py:61

Hidden file access

env_file = Path("/home/adamsl/ottomator-agents/livekit-agent/.env")

The code references local .env files that can contain API keys and service credentials. Reading or exporting those files is sensitive behavior.

高

scripts/start_voice_system.py:71

Hidden file access

planner_env = Path("/home/adamsl/planner/.env")

The code references local .env files that can contain API keys and service credentials. Reading or exporting those files is sensitive behavior.

高

scripts/start_voice_system.py:68

Python environment access

os.environ[key] = value

The code references local .env files that can contain API keys and service credentials. Reading or exporting those files is sensitive behavior.

高

scripts/start_voice_system.py:78

Python environment access

os.environ.setdefault(key, value)

The code references local .env files that can contain API keys and service credentials. Reading or exporting those files is sensitive behavior.

高

SKILL.md:41

Hardcoded IP address

nohup ./livekit-server --dev --bind 0.0.0.0 > /tmp/livekit.log 2>&1 &

The command binds LiveKit to 0.0.0.0, which listens on all interfaces. That can expose a local dev service beyond localhost.

中

QUICK_REFERENCE.md:98

Temp directory access

rm -f /tmp/letta_voice_agent.{pid,lock}

The command deletes predictable files under /tmp that are used for PID and lock state. Removing those files can bypass duplicate-process protection.

中

scripts/diagnose_voice_system.py:89

Hidden file access

venv_python = "/home/adamsl/planner/.venv/bin/python3"

The script uses a hardcoded hidden virtualenv path to execute local Python code. This is not portable and can run unexpected local binaries.

中

scripts/start_voice_system.py:96

Hidden file access

"/home/adamsl/planner/.venv/bin/python3",

The script uses a hardcoded hidden virtualenv path to execute local Python code. This is not portable and can run unexpected local binaries.

中

scripts/start_voice_system.py:97

Hidden file access

["/home/adamsl/planner/.venv/bin/python3", LETTA_VOICE_AGENT_EXE, "start"]

The script uses a hardcoded hidden virtualenv path to execute local Python code. This is not portable and can run unexpected local binaries.

中

SKILL.md:41

nohup (background persistent process)

nohup ./livekit-server --dev --bind 0.0.0.0 > /tmp/livekit.log 2>&1 &

The reset workflow starts LiveKit as a persistent background process. This can leave a service running after the user expects debugging to end.

中

SKILL.md:44

Hidden file access

/home/adamsl/planner/.venv/bin/python3 letta_voice_agent.py dev > /tmp/letta_voice_agent.log 2>&1 &

The package references hidden local paths in commands or configuration. In a marketplace skill, those paths need explicit user review.

中

SKILL.md:41

Temp directory access

nohup ./livekit-server --dev --bind 0.0.0.0 > /tmp/livekit.log 2>&1 &

The workflow writes service logs to predictable files under /tmp. Shared temporary paths can create disclosure or tampering risk.

中

SKILL.md:44

Temp directory access

/home/adamsl/planner/.venv/bin/python3 letta_voice_agent.py dev > /tmp/letta_voice_agent.log 2>&1 &

The workflow writes service logs to predictable files under /tmp. Shared temporary paths can create disclosure or tampering risk.

风险因素

📁 文件系统访问 (32)

🌐 网络访问 (6)

README.md:48 scripts/generate_token.py:57 scripts/start_voice_system.py:85 SKILL.md:53 SKILL.md:41 SKILL.md:74

⚙️ 外部命令 (22)

🔑 环境变量 (16)

审计者: codex 查看审计历史 →

分享与引用此报告

分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。

打开版本化报告

复制报告链接

https://skillstore.io/skills/egadams-voice-agent-expert/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/egadams-voice-agent-expert/security.svg)](https://skillstore.io/skills/egadams-voice-agent-expert?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/egadams-voice-agent-expert?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/egadams-voice-agent-expert/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/egadams-voice-agent-expert.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

学术引用 (APA · BibTeX · CFF)

APA 引用

EGAdams. (2026). voice-agent-expert security audit report (audit version 8) [Author version unspecified]. Skillstore. https://skillstore.io/skills/egadams-voice-agent-expert/audits/8

BibTeX 引用

@techreport{egadams-egadams-voice-agent-expert-2026,
  author = {EGAdams},
  title = {voice-agent-expert security audit report (audit version 8)},
  institution = {Skillstore},
  year = {2026},
  number = {8},
  url = {https://skillstore.io/skills/egadams-voice-agent-expert/audits/8},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "voice-agent-expert security audit report (audit version 8)"
version: "unspecified"
type: report
authors:
  - name: "EGAdams"
date-released: "2026-07-06"
url: "https://skillstore.io/skills/egadams-voice-agent-expert/audits/8"
identifiers:
  - type: other
    value: "skillstore:egadams-voice-agent-expert:audit:8"
    description: "Skillstore immutable audit report identifier"

Skillstore 评分

评分依据证据置信度: 中

架构

可维护性

内容

社区

规范符合性

你能构建什么

修复本地语音聊天设置

诊断本地 LiveKit 和 Letta 语音会话无法连接或响应的原因。

调试音频中断

将间歇性音频故障追踪到重复 worker、过期房间或错误的代理模式。

准备支持运行手册

将反复出现的 LiveKit 和 Letta 故障转化为可重复执行的检查和升级步骤。

试试这些提示

诊断连接失败

我的 LiveKit 和 Letta 语音代理无法连接。先询问错误信息，然后指导我优先完成最安全的检查。

选择正确的代理模式

解释本地语音聊天应使用 START 模式还是 DEV 模式，并列出选择错误模式时的症状。

调查重复 worker

帮助我判断重复的 voice-agent worker 或过期的 LiveKit 房间是否导致了音频中断。

设计更安全的启动工作流

从安全风险、密钥处理和更安全的进程管理角度，审查我的本地 LiveKit 和 Letta 启动工作流。

最佳实践

在针对本地服务或 shell 启动文件运行任何命令前，先逐条审查。
在跨机器共享此工作流前，将硬编码路径移入配置。
将生成的 LiveKit 令牌和 .env 内容视为敏感凭据。

避免

不要在未确认匹配进程的情况下运行宽泛的进程终止命令。
不要在缺少网络控制的情况下将本地开发服务绑定到所有接口。
不要将生成的令牌或源自 .env 的输出粘贴到公开 issue 报告中。

常见问题

此技能面向哪些系统？

它面向本地 LiveKit 和 Letta 语音代理开发与故障排查。

此技能会自动运行命令吗？

它包含脚本和命令指导。用户应在执行前审查命令。

它能生成 LiveKit 令牌吗？

可以。令牌脚本会读取 LiveKit 凭据并打印连接令牌。

它可以用于生产部署吗？

不能。它是本地调试参考，缺少生产加固指导。

为什么重复进程很重要？

重复 worker 可能会争用同一音频流，并产生超时或中断。

为什么审计会标记风险？

该包会读取 .env 文件、处理 API 密钥、启动进程，并使用硬编码路径。

开发者详情

作者

EGAdams

许可证

MIT

Skillstore 修订

版本提示

作者未声明版本。

仓库

https://github.com/EGAdams/planner/tree/main/.claude/skills/voice-agent-expert

引用

72d5025b022c77f7a51bdf5c1637c689c80e89d1

维护新鲜度

2026/7/25

使用量

4 次下载 · 177 次浏览

文件结构

📁 scripts/

📄 diagnose_voice_system.py

📄 generate_token.py

📄 start_voice_system.py

📄 QUICK_REFERENCE.md

📄 README.md

📄 SKILL.md