Speaches

• Analyzed: May 12, 2026, 6:19 AM
• Findings: 1
• Version: 0.1.0
• Hash: 4fcc342d18d11cebdbcead93283a631d9b46f3f412b84745b9ddd0f96a83b384
• Source: palm
• External report: View on VirusTotal

Findings (1)

Package: openclaw-speaches (npm) Version: 0.1.0 Description: Speaches realtime STT and Kokoro TTS providers for OpenClaw The package functions as an integration plugin for the OpenClaw framework, providing Realtime Speech-to-Text (STT) and Text-to-Speech (TTS) capabilities by connecting to a configured external API, defaulting to a local server endpoint (`http://127.0.0.1:8000/v1`). It uses the 'ws' library for WebSocket communication (STT) and standard `fetch` for HTTP communication (TTS). It handles configuration (including API keys) and performs necessary audio format conversions (Twilio Mu-law to PCM). All network activity and data handling are directly related to the plugin's declared functionality, and there is no evidence of unauthorized data transmission, arbitrary code execution, or malicious behavior.