Security audit
Inworld
Security checks for vulnerabilities and agentic risk
Overview
This package is a coherent Inworld text-to-speech plugin that uses an Inworld API key and sends speech text to the configured Inworld service.
Install only if you intend OpenClaw to send TTS text to Inworld or a trusted configured base URL using your Inworld API key. Avoid custom baseUrl values unless you control and trust the endpoint, since the API key is sent in the Authorization header.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.