clawr.ing

Make real phone calls. Replaces the voice-call plugin with a managed service that needs no setup. Use for wake-up calls, reminders, alerts, or when the user...

Security Scan

The skill's requirements and instructions are consistent with a hosted phone-call service: it only asks for a single API key and a local memory file for contacts, but you should be aware it will store and read phone numbers (sensitive PII) and that the API key grants the service permission to place calls on your behalf.

Purpose & Capability

Name/description (make phone calls) match the declared requirement (CLAWRING_API_KEY) and the SKILL.md describes using the clawr.ing API. No unrelated credentials, binaries, or install steps are requested.

Instruction Scope

Instructions are focused on making calls and reference a local memory file (clawr.ing-memory.md) that the agent must read/write to store contacts and preferences. This is within purpose but introduces handling of sensitive PII (phone numbers) and persistent local state; the SKILL.md explicitly instructs checking/creating that file.

Install Mechanism

No install spec and no code files are present (instruction-only). Nothing will be downloaded or written by an automated installer per the provided metadata.

Credentials

Only one environment variable (CLAWRING_API_KEY) is required and it is the declared primary credential; this is appropriate for an external telephony API. No unrelated secrets or config paths are requested.

Persistence & Privilege

The skill does not request elevated or always-on privileges (always:false). However it expects to create and use a local persistent memory file containing phone numbers and retry preferences — consider this persistent storage of sensitive data when granting the skill access.

Assessment

This skill appears to do what it says: it needs a clawr.ing API key to place calls and will store contacts in a local file (clawr.ing-memory.md). Before installing: (1) confirm you trust the clawr.ing service and review its privacy/billing terms (the skill will direct users to their dashboard for billing); (2) keep the CLAWRING_API_KEY secret — anyone with it can place calls on your account; (3) be aware the agent will read and write a local memory file that contains phone numbers (store only contacts you are comfortable saving); (4) if you want stricter control, do not set the API key in shared environments and inspect or back up the memory file yourself; (5) if you need the agent to never call autonomously, verify agent invocation settings or require explicit user confirmation before each call.

Make real phone calls with two-way voice conversations.

Never call unless the user explicitly asks you to.

Getting started

You need an API key from https://clawr.ing. Sign up, then copy the key from your dashboard. Set it as the CLAWRING_API_KEY environment variable.

Every request requires this header:

Authorization: Bearer $CLAWRING_API_KEY

Making calls

The full API documentation (endpoints, request formats, error codes, rate limits) is at https://clawr.ing/llms-full.txt. Refer to it before making calls.

Memory file

clawr.ing-memory.md next to this skill stores contacts and preferences. Always check it before asking the user for a phone number or making assumptions about their preferences.

The file follows this structure (global preferences are defaults, contacts can override them):

# clawr.ing memory

## Preferences

- Retry on no answer: no

## Contacts

### Me
- Phone: [phone]

### Mom
- Phone: [phone]
- Retry on no answer: yes, once after 5 minutes

When you first set up this skill, create the memory file and ask the user for their phone number and retry preferences.

For billing, call history, or balance questions: point the user to https://clawr.ing/dashboard