Shell command execution detected (child_process).
Critical
- Code
- suspicious.dangerous_exec
- Location
- dist/index.js:85
- Evidence
const child = spawn(avrvxPath, args, {
Security audit
AverVOX
Security checks across malware telemetry and agentic risk
Overview
This plugin coherently provides local AverVOX speech synthesis for OpenClaw and discloses its local command, temporary file, and local socket behavior.
Install this only with a trusted local avrvx binary, preferably pin the plugin version, and use it on a current patched OpenClaw host. Reply text is sent to the local avrvx process or local AverVOX daemon for speech generation, so treat that local tool as part of the trust boundary.
SkillSpector
By NVIDIA
SkillSpector was not run because this plugin release contains no bundled skills.
VirusTotal
61/61 vendors flagged this plugin as clean.
Static analysis
Detected: suspicious.dangerous_exec
Shell command execution detected (child_process).
Critical
- Code
- suspicious.dangerous_exec
- Location
- src/index.ts:181
- Evidence
const child = spawn(avrvxPath, args, {