Phone Voice Integration

• Analyzed: May 12, 2026, 3:23 AM
• Findings: 1
• Version: 2.0.0
• Hash: 13cdb342b8af8290e8ecb5ab48d18cb4c4efa445f9159784e95bd69ac723df88
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to several high-risk capabilities described in `SKILL.md`. The custom bridge server can execute external commands (e.g., `gog CLI` for calendar events), which could lead to arbitrary command execution if exploited. It also explicitly injects content from `MEMORY.md` and `USER.md` into the LLM's system prompt, creating a significant prompt injection surface. Furthermore, an `/call/outbound` endpoint allows making phone calls, which could be abused if the authentication token is compromised. These capabilities, while potentially intended for functionality, introduce substantial security risks without clear malicious intent in the provided documentation.