ClawHub
Back to skill

Security audit

OpenPhone

Security checks for vulnerabilities and agentic risk

Overview

This is a straightforward OpenPhone API reference skill with sensitive but disclosed business phone capabilities.

Install only if you want an agent to use your OpenPhone account. Treat the API key as sensitive, prefer the least-privileged key available, and require clear confirmation of recipient, message content, contact fields, or call/message records before the agent sends or retrieves data.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The skill explicitly supports sending SMS, searching contacts, listing messages, retrieving call history, voicemail, recordings, and transcripts, but it provides no privacy notice, consent guidance, or warnings that user data will be transmitted to and retrieved from a third-party telecom provider. In a messaging/call-management context, these actions inherently involve sensitive personal and business communications, so the omission increases the risk of unauthorized disclosure or misuse.

Static analysis

No suspicious patterns detected.