voiceskill
Security checks across static analysis, malware telemetry, and agentic risk
Overview
The skill is internally consistent with its stated purpose (starting voice calls via the voice-call plugin); it is instruction-only, requests no extra credentials, and points to the plugin config for provider credentials.
This skill appears to do what it says: drive the OpenClaw voice-call plugin. Before enabling/installing, check the plugin configuration (plugins.entries.voice-call.config) to confirm which provider is configured and to verify stored credentials (Twilio/Telnyx/Plivo) are correct and limited to an account you control. Be aware the agent can place outbound calls (which may incur costs, expose audio to the provider, or create abuse risk). If you don't want autonomous calls, restrict agent policies or disable autonomous invocation for this skill. If you need stronger guarantees, require explicit user confirmation in your agent workflow before any outbound call is initiated.
SkillSpector
SkillSpector findings are pending for this release.
Static analysis
Static analysis findings are pending for this release.
VirusTotal
VirusTotal findings are pending for this skill version.