Agentic Calling

• Analyzed: May 12, 2026, 3:15 AM
• Findings: 1
• Version: 0.1.0
• Hash: 235b446e212b50a9e8c279c96b234ee66df1fb3d1dfb5a461658610c52d6ef7d
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is designed to enable AI agents to make and receive phone calls and send SMS using Twilio. It handles Twilio credentials by reading from environment variables or a dedicated configuration file (`~/.clawdbot/twilio-config.json`), which is a standard and secure practice. All network interactions are directed to the legitimate Twilio API (`api.twilio.com`). The shell scripts use common utilities (`curl`, `jq`, `python3`) for their stated purpose, and there is no evidence of data exfiltration, malicious execution (e.g., `curl|bash`), persistence mechanisms, or obfuscation. The `SKILL.md` and `README.md` files provide clear instructions for using the skill and do not contain any prompt injection attempts or instructions for the AI agent to perform unauthorized actions.