Call Center

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: call-center Version: 1.0.0 The skill bundle is benign. It provides an AI agent with structured instructions and templates for call center operations. The only file system interactions are `mkdir -p` and `touch` commands found in `memory-template.md`, which are explicitly for setting up the skill's local data storage (`~/call-center/`) and are not indicative of malicious intent or a vulnerability. All markdown files contain operational guidance for the agent, without any prompt injection attempts to subvert its function, exfiltrate data, or perform unauthorized actions.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Customer details and call history may remain on disk and influence later interactions, so inaccurate or sensitive notes could be reused.

Why it was flagged

The memory template stores caller identities, issues, promises, reference numbers, preferences, and notes in persistent local files.

Skill content
| Time | Caller | Issue | Status | ... | Due | Caller | Promise | Ref# | ... | Caller | Preference | Notes |
Recommendation

Store only the minimum necessary information, avoid unnecessary account details, secure the ~/call-center/ directory, and apply a clear retention/deletion policy.

What this means

Incorrect or unauthorized CRM notes could affect customer records, follow-ups, or internal decisions.

Why it was flagged

The skill instructs the agent to write customer interaction notes to a CRM, which is a business-record mutation even though it is expected for call-center work.

Skill content
- Update CRM with interaction notes
Recommendation

Use this only with authorized CRM access, review important notes before saving, and follow the organization’s customer-data handling policy.