Discord Voice

• Analyzed: May 12, 2026, 3:06 AM
• Findings: 1
• Version: 0.1.6
• Hash: 825ffd9bb19da9024a5aad60e631a09e494c78c87f8e71f73cb9a9d783393a4c
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw Discord Voice plugin is designed with strong security considerations. It implements robust sanitization for all user-controlled inputs before they are used in agent prompts or file paths, specifically preventing prompt injection via user IDs and path traversal for custom sound files. The dynamic loading of the core OpenClaw extension API is performed with integrity checks, verifying the package name and resolving paths securely. While the plugin connects to various external STT/TTS APIs and a configurable local Wyoming Whisper server, these network interactions are for its stated purpose and API keys are handled via configuration or environment variables, not directly from user input. No evidence of intentional harmful behavior, such as data exfiltration to unauthorized endpoints or backdoor installation, was found.