Call Center
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: call-center Version: 1.0.0 The skill bundle is benign. It provides an AI agent with structured instructions and templates for call center operations. The only file system interactions are `mkdir -p` and `touch` commands found in `memory-template.md`, which are explicitly for setting up the skill's local data storage (`~/call-center/`) and are not indicative of malicious intent or a vulnerability. All markdown files contain operational guidance for the agent, without any prompt injection attempts to subvert its function, exfiltrate data, or perform unauthorized actions.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Customer details and call history may remain on disk and influence later interactions, so inaccurate or sensitive notes could be reused.
The memory template stores caller identities, issues, promises, reference numbers, preferences, and notes in persistent local files.
| Time | Caller | Issue | Status | ... | Due | Caller | Promise | Ref# | ... | Caller | Preference | Notes |
Store only the minimum necessary information, avoid unnecessary account details, secure the ~/call-center/ directory, and apply a clear retention/deletion policy.
Incorrect or unauthorized CRM notes could affect customer records, follow-ups, or internal decisions.
The skill instructs the agent to write customer interaction notes to a CRM, which is a business-record mutation even though it is expected for call-center work.
- Update CRM with interaction notes
Use this only with authorized CRM access, review important notes before saving, and follow the organization’s customer-data handling policy.
