ElevenLabs Phone Reminder (Lite)

ReviewAudited by ClawScan on May 1, 2026.

Overview

This is a transparent instruction-only guide, but following it means using service credentials to create AI phone-calling resources that can contact people and incur charges.

This skill appears benign as a starter guide. Before using it, make sure you are comfortable giving ElevenLabs/Twilio the required credentials, calling only consented recipients, paying any provider charges, and deleting or disabling the created phone-call resources when you are done.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Anyone following the guide will be using credentials that can enable calls and charges on their Twilio/ElevenLabs accounts.

Why it was flagged

The guide requires Twilio account credentials and sends the Twilio auth token to ElevenLabs to connect the phone number. This is expected for the integration, but it grants meaningful account and billing authority.

Skill content
Need: Account SID, Auth Token, Phone Number ... "token": "'$TWILIO_AUTH_TOKEN'"
Recommendation

Use only official provider consoles, consider restricted credentials or a Twilio subaccount if available, and rotate/revoke tokens if they are pasted into unsafe places.

What this means

A mistaken or unauthorized call could reach the wrong person, disturb recipients, or create phone charges.

Why it was flagged

The artifact provides a raw API command that initiates an outbound phone call. It is user-directed and aligned with the skill purpose, but it can affect recipients and generate costs.

Skill content
curl -X POST "https://api.elevenlabs.io/v1/convai/twilio/outbound-call" ... "to_number": "+1RECIPIENT_NUMBER"
Recommendation

Only call numbers you are authorized to contact, confirm the recipient number before running the command, and monitor Twilio/ElevenLabs usage and billing.

What this means

Phone numbers and call content may be processed by external providers according to their own privacy, retention, and compliance terms.

Why it was flagged

The guide describes routing live voice calls through ElevenLabs, Twilio, and the phone network. This disclosed provider flow may involve recipient phone numbers and conversation audio.

Skill content
Your App → ElevenLabs → Twilio → Phone Network ... Real-time voice interaction (not pre-recorded!)
Recommendation

Review ElevenLabs and Twilio privacy/retention settings, avoid sensitive reminder content unless appropriate, and ensure recipients consent to AI voice calls.