phone call agent

• Analyzed: Apr 15, 2026, 1:56 PM
• Findings: 1
• Version: 1.0.5
• Hash: c5b5fc88f19dffec92653d1ac7ae58b66b38e3715563b0fdbd3c83570b562df4
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is an AI-powered voice assistant designed to make phone calls via the 'skill.black' API. It functions as described, including explicit privacy disclosures and mandatory user confirmation steps in the SKILL.md instructions before transmitting sensitive data (phone numbers and conversation context) to the external service. The Python scripts (make-call.py and query-call.py) are transparent API clients that handle authentication via environment variables or local configuration files and include basic logging of call statuses without any evidence of malicious intent, obfuscation, or unauthorized data exfiltration.