Shell command execution detected (child_process).
Critical
- Code
- suspicious.dangerous_exec
- Location
- dist/index.js:60
- Evidence
const child = spawn(player.cmd, [...player.args, tmpFile], {
Security audit
Edge TTS for OpenClaw
Security checks for vulnerabilities and agentic risk
Overview
This plugin does what it claims: it reads agent reply text aloud using Edge TTS, with a clearly disclosed cloud privacy tradeoff.
Install only if you are comfortable with agent reply text being sent to Microsoft's Edge TTS cloud service. Keep autoSpeak set to auto for more control, and avoid using it in sessions that handle sensitive or private content.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
Detected: suspicious.dangerous_exec