Security audit

Local Realtime Voice

Security checks for vulnerabilities and agentic risk

Overview

The plugin mostly matches its local voice-assistant purpose, but it also contains an under-documented path that can read the local OpenClaw gateway token and act through the gateway with write-level operator access.

Review carefully before installing. The documented local voice features look purpose-aligned, but only use this plugin if you are comfortable with microphone audio and transcripts being sent to the configured local endpoints. Do not enable or pass any main-agent or gateway-token settings unless you trust the publisher and understand that it can use your local OpenClaw gateway token to send chat actions with write-level operator scope.

Static analysis

Detected: suspicious.dangerous_exec, suspicious.install_untrusted_source

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: index.js:80
Evidence: const child = spawn("ffmpeg", args, { stdio: ["pipe", "pipe", "pipe"] });

Install source points to URL shortener or raw IP.

Warn

Code: suspicious.install_untrusted_source
Location: openclaw.plugin.json:19
Evidence: "default": "http://127.0.0.1:8000"