Security audit
Inworld
Security checks for vulnerabilities and agentic risk
Overview
The plugin sends speech text to Inworld and returns generated audio, consistent with its stated purpose.
Speech text is sent to the configured service. Use an appropriate Inworld API key and only configure a trusted HTTPS base URL, because that endpoint receives both the text and credential.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.
Endor dependency reachability
Checked Nov 3, 2026 · 5:07 AM UTC
No reachable vulnerabilities reported
Endor dependency scan completed.