ClawHub
Back to skill

Security audit

Agentic Calling

Security checks across malware telemetry and agentic risk

Overview

This Twilio calling skill is transparent about its purpose, but it gives agents broad real-world calling, texting, recording, and billing power without enough built-in safeguards.

Install only if you intentionally want an agent to use your Twilio account for real calls and SMS. Before use, add recipient allowlists, human approval for outbound or bulk sends, rate and spend limits, clear consent rules for recording/transcription, protected credential storage, and avoid passing untrusted message text until the make-call.sh encoding bug is fixed.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (5)

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The README promotes autonomous phone calls and SMS messaging but does not warn about consent requirements, user-impacting external communications, or the possibility of telephony charges. This can lead operators to deploy the skill in ways that trigger unauthorized outreach, legal/compliance issues, or unexpected costs, especially because the feature is presented as quick-start automation.

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The skill explicitly promotes call recording and transcription but does not warn about consent requirements, privacy laws, or handling of sensitive audio/transcript data. In a telephony context, this omission can lead agents or operators to deploy recording workflows that violate legal requirements or expose sensitive personal information.

Missing User Warnings

Medium
Confidence
86% confidence
Finding
The voicemail and call logging guidance encourages storage of caller communications without describing retention, privacy, or protection of stored caller data. Because this skill is designed for autonomous phone interactions, the omission increases the chance that personally identifiable or sensitive information will be retained insecurely or longer than necessary.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The script explicitly enables call recording for appointment reminder calls using potentially sensitive personal and medical context, but it does not provide any user-facing disclosure or collect consent before recording. In many jurisdictions, recording calls without proper notice or consent can create legal, privacy, and compliance exposure, especially when the message references healthcare appointments.

Missing User Warnings

Medium
Confidence
89% confidence
Finding
The script enables call recording and transcription via simple flags but provides no runtime consent check, jurisdiction-aware warning, or guardrail before transmitting potentially sensitive voice content to Twilio for storage and optional transcription. In an agent skill context, this increases the risk of unlawful or non-consensual recording of third parties, especially because an automated agent may invoke these options without meaningful user review.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.