Security audit
Inworld
Security checks for vulnerabilities and agentic risk
Overview
This is a coherent Inworld text-to-speech plugin that sends user-requested text to Inworld using a configured API key, with no hidden install hooks, local file access, persistence, or destructive behavior found.
Install only if you intend to use Inworld speech synthesis. The text you synthesize and your Inworld API credential are used for requests to the configured Inworld-compatible endpoint; leave baseUrl at the default unless you trust the replacement service.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.