Security audit
OpenClaw Gradium Plugin
Security checks for vulnerabilities and agentic risk
Overview
The plugin provides text-to-speech through Gradium, with credential use and network access that match its purpose.
Text selected for speech is sent to Gradium using your API key and may incur provider charges. Configure speech use according to your privacy preferences. This static review covered all bundled runtime JavaScript; the host SDK and Gradium's server-side handling were not verified.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.
Endor dependency reachability
Checked Nov 3, 2026 · 5:06 AM UTC
No reachable vulnerabilities reported
Endor dependency scan completed.