2026.6.8
@openclaw/sherpa-onnx-tts
OpenClaw offline local text-to-speech plugin using sherpa-onnx.
Rank#1814
Security Findings
3pull_request_target with secrets
MaliciousLineage[.github/workflows/auto-response.yml] pull_request_target with secrets
Unpinned dependencies
SuspiciousLineage2 unpinned: @openclaw/ai, @openclaw/session-url-contract
Workflow makes outbound network call
SuspiciousLineage[.github/workflows/mantis-slack-desktop-smoke.yml] curl -fsS --connect-timeout 5 --max-time 15 https://checkip.amazonaws.com
Contents
1 skill bundled by this extension
1 lower risk
Editions
1- 2026.6.8Scanned Aug 4, 2026, 03:33 PMMedium