Agentic Calling
v0.1.0Enable AI agents to autonomously make, receive, transcribe, route, and record phone calls using Twilio with customizable voice messages and IVR support.
⭐ 3· 2.7k·6 current·6 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name, SKILL.md, and shipped scripts all describe Twilio voice/SMS functionality. Declared dependencies (curl, jq, python3) and the use of a Twilio account are consistent with making calls, sending SMS, downloading recordings, and querying call status.
Instruction Scope
Runtime instructions and scripts only access Twilio APIs and the local config file (~/.clawdbot/twilio-config.json) — no unrelated system paths or hidden endpoints. However, the SKILL.md references multiple helper scripts (receive-call.sh, setup-webhook.sh, create-ivr.sh, conference.sh, make-call-elevenlabs.sh) that are not present in the file manifest; voice‑cloning via ElevenLabs is mentioned but no implementation or helper script is included. This mismatch means inbound/webhook and advanced features may not work as documented.
Install Mechanism
No install spec is provided (instruction-only installation). Nothing in the package attempts to download or install third‑party code automatically, so there is no installer-based risk. The skill does require making the shipped scripts executable (chmod +x).
Credentials
The skill expects Twilio credentials (Account SID, Auth Token, and phone number) either in a config file or environment variables — these are the only sensitive values referenced and are proportional to the stated purpose. The SKILL.md also mentions an ElevenLabs API key only for an experimental feature; that would be optional if implemented.
Persistence & Privilege
The skill does not request elevated or persistent system privileges and does not set always:true. It only reads a user-local config file and environment variables. Autonomous invocation is allowed (platform default) but the skill itself does not modify other skills or system settings.
Assessment
This package appears to be a coherent Twilio caller/SMS toolkit and only requires your Twilio credentials — which you should treat as sensitive. Before installing or running: (1) verify the package source/trustworthiness (metadata lists a GitHub repo but the provided source is 'unknown'), (2) keep your TWILIO_ACCOUNT_SID and TWILIO_AUTH_TOKEN private and use least-privilege Twilio credentials or subaccounts if possible, (3) review any StatusCallback/RecordingStatusCallback URLs you pass to avoid sending call data to untrusted endpoints, (4) note that several inbound/webhook and advanced scripts mentioned in SKILL.md (receive-call.sh, setup-webhook.sh, create-ivr.sh, conference.sh, make-call-elevenlabs.sh) are not included — expect to implement or obtain them separately if you need those features, and (5) run the scripts in a controlled environment first to confirm behavior and billing impact (calls/SMS cost real money). If you want higher assurance, ask the publisher for the missing scripts or a verified upstream repository before use.Like a lobster shell, security has layers — review code before you run it.
latestvk9752b16d53g8c6p9m6h6n808580b79v
License
MIT-0
Free to use, modify, and redistribute. No attribution required.