ClawHub

outbound call china

v3.3.0

An AI outbound assistant supporting diverse scenarios and Chinese phone numbers. Simply describe your scenario in one sentence, and the AI will generate real...

⭐ 0· 67·0 current·0 all-time
by@naive-white-expert
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
Requires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match implementation: scripts implement API calls to an outbound-voice service, require a single API key (OUTBOUND_API_KEY) and the 'uv' runner as declared. Required binaries and env vars are proportionate to the stated telephony purpose.
ℹ
Instruction Scope
SKILL.md instructs collecting phone, conversation context, and explicit user confirmation before calling — which the scripts implement. It does send phone numbers and conversation transcripts to the remote API (https://www.skill.black) as intended. Note: the skill stores PII (phone numbers, transcripts) locally under memory/skills/requests.jsonl and costs.jsonl as documented; the README includes a consent step and deletion guidance.
✓
Install Mechanism
No install spec or external downloads; this is an instruction+script bundle. No archive downloads or third-party package installs are present in the provided files.
✓
Credentials
Only OUTBOUND_API_KEY (required) and an optional OUTBOUND_BASE_URL are used. The code reads those env vars or an explicit ~/.openclaw/secrets/outbound.json fallback — consistent with the documented configuration. No other credentials or unrelated env vars are accessed.
✓
Persistence & Privilege
The skill is not always-on and uses normal agent invocation. It writes local logs under memory/skills within the skill directory (requests.jsonl and costs.jsonl) to track calls — this behavior is declared in SKILL.md and matches the code.
Assessment
This skill appears coherent with its stated purpose, but review these points before installing: 1) The skill will transmit phone numbers and conversation text to https://www.skill.black — verify you trust that service and review its privacy policy. 2) It stores PII locally in memory/skills/requests.jsonl and costs.jsonl; delete or secure these files if needed and follow the SKILL.md guidance (chmod 600 for any config files). 3) Provide a least-privilege API key (rotate/revoke if needed) and confirm OUTBOUND_BASE_URL is not changed to an untrusted endpoint. 4) Ensure you obtain explicit consent from call targets as required by law/regulation for automated calls in your jurisdiction. 5) If you need higher assurance, inspect/host the scripts yourself or run them in an isolated environment before adding the skill to an agent.

Like a lobster shell, security has layers — review code before you run it.

latestvk97dkv7r3b8kk9vjgd0fqejxcs84xezz

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

Binsuv
EnvOUTBOUND_API_KEY

Comments