Skip to main content

sherpa-onnx-tts

Local text-to-speech via sherpa-onnx (offline, no cloud)

83/100

Security score

The sherpa-onnx-tts skill was audited on Feb 28, 2026 and we found 5 security issues across 1 threat category. Review the findings below before installing.

Categories Tested

Security Issues

medium line 66

Access to hidden dotfiles in home directory

SourceSKILL.md
661. Download the runtime for your OS (extracts into `~/.openclaw/tools/sherpa-onnx-tts/runtime`)
medium line 67

Access to hidden dotfiles in home directory

SourceSKILL.md
672. Download a voice model (extracts into `~/.openclaw/tools/sherpa-onnx-tts/models`)
medium line 69

Access to hidden dotfiles in home directory

SourceSKILL.md
69Update `~/.openclaw/openclaw.json`:
low line 77

Access to hidden dotfiles in home directory

SourceSKILL.md
77SHERPA_ONNX_RUNTIME_DIR: "~/.openclaw/tools/sherpa-onnx-tts/runtime",
low line 78

Access to hidden dotfiles in home directory

SourceSKILL.md
78SHERPA_ONNX_MODEL_DIR: "~/.openclaw/tools/sherpa-onnx-tts/models/vits-piper-en_US-lessac-high",
Scanned on Feb 28, 2026
View Security Dashboard