ClawHub
Back to plugin

Security audit

Sherpa ONNX TTS

Security checks for vulnerabilities and agentic risk

Overview

This official OpenClaw plugin coherently provides offline local text-to-speech and does not show hidden data access or unsafe automatic behavior.

Reasonable to install if you want offline TTS. Review that it downloads third-party sherpa-onnx runtime/model assets on macOS, or uses manually supplied assets on Linux/Windows, and that the local native binary receives your process environment when it runs.

SkillSpector

Vulnerability Patterns
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Credential Access

High
Category
Privilege Escalation
Confidence
60% confidence
Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · bin/sherpa-onnx-tts (reported line 218)May include surrounding context.

text
usage(`TTS binary not found: ${bin}`);
}

const env = { ...process.env };
const libDir = path.join(runtimeDir, "lib");
if (process.platform === "darwin") {
  env.DYLD_LIBRARY_PATH = prependEnvPath(env.DYLD_LIBRARY_PATH || "", libDir);

Static analysis

No suspicious patterns detected.