outbound call china

• Risk level: Low
• Analyzed: Apr 15, 2026, 1:10 PM
• Findings: 0
• Version: 3.3.0

Overview

The skill's files, runtime instructions, and required environment variables are consistent with an outbound-call assistant for Chinese numbers; nothing requests unrelated credentials or installs arbitrary code.

This skill appears coherent with its stated purpose, but review these points before installing: 1) The skill will transmit phone numbers and conversation text to https://www.skill.black — verify you trust that service and review its privacy policy. 2) It stores PII locally in memory/skills/requests.jsonl and costs.jsonl; delete or secure these files if needed and follow the SKILL.md guidance (chmod 600 for any config files). 3) Provide a least-privilege API key (rotate/revoke if needed) and confirm OUTBOUND_BASE_URL is not changed to an untrusted endpoint. 4) Ensure you obtain explicit consent from call targets as required by law/regulation for automated calls in your jurisdiction. 5) If you need higher assurance, inspect/host the scripts yourself or run them in an isolated environment before adding the skill to an agent.