Security audit
Security checks across malware telemetry and agentic risk
This is a real Twilio-to-Gemini phone bridge, but it needs Review because it exposes unauthenticated public call-control features that can place and record phone calls using the operator's Twilio account.
Install only if you are prepared to operate it like a public telephony service. Before exposing it, set PUBLIC_URL, TWILIO_ACCOUNT_SID, and TWILIO_FROM to values you control; add authentication to /call and /status; validate Twilio webhook signatures; restrict destination numbers; add rate limits and quotas; and implement clear consent and disclosure for AI voice processing and any recording.
if self._file:
self._file.close()
path = OPENCLAW_LOG_DIR / f"openclaw-{now_date}.log"
self._file = open(path, "a", encoding="utf-8")
self._current_date = now_date
def emit(self, record: logging.LogRecord):fastapi>=0.135.0 uvicorn>=0.41.0 google-genai>=1.60.0 twilio>=9.0.0
fastapi>=0.135.0 uvicorn>=0.41.0 google-genai>=1.60.0 twilio>=9.0.0 audioop-lts>=0.2.0
fastapi>=0.135.0 uvicorn>=0.41.0 google-genai>=1.60.0 twilio>=9.0.0 audioop-lts>=0.2.0 websockets>=16.0
fastapi>=0.135.0 uvicorn>=0.41.0 google-genai>=1.60.0 twilio>=9.0.0 audioop-lts>=0.2.0 websockets>=16.0 python-multipart>=0.0.20
uvicorn>=0.41.0 google-genai>=1.60.0 twilio>=9.0.0 audioop-lts>=0.2.0 websockets>=16.0 python-multipart>=0.0.20
google-genai>=1.60.0 twilio>=9.0.0 audioop-lts>=0.2.0 websockets>=16.0 python-multipart>=0.0.20
twilio>=9.0.0 audioop-lts>=0.2.0 websockets>=16.0 python-multipart>=0.0.20
65/65 vendors flagged this skill as clean.
No suspicious patterns detected.