Bandwidth

Bandwidth — messaging, voice calls, phone numbers, and 911 services.

Security Scan

The skill's declared purpose (Bandwidth API) matches the code's network targets, but there are implementation inconsistencies and an undeclared .env fallback that warrant caution before installing.

Purpose & Capability

Name/description, required env vars (BANDWIDTH_API_TOKEN, BANDWIDTH_ACCOUNT_ID), and the API base (messaging.bandwidth.com) align with a Bandwidth messaging/voice CLI. Nothing requests unrelated cloud providers or services.

Instruction Scope

SKILL.md describes CLI commands that call scripts/bandwidth.py, but the script contains argument-handling bugs (functions check getattr(args, 'from') while argparse stores values in args.from_addr). The script also silently falls back to reading a .env file under WORKSPACE or ~/.openclaw/workspace to obtain credentials — this behavior is not documented in SKILL.md. These inconsistencies could cause unexpected failures or unintentional exposure of values from a workspace .env.

Install Mechanism

No install spec; the skill is instruction-only with a single Python script and claims to use only the standard library. No external downloads or package installs are requested.

Credentials

Only two credentials are required and are appropriate for the declared purpose. However, the code also reads WORKSPACE (if set) and a .env file in a workspace directory to find those env vars — this fallback is not declared and could read other files containing secrets. Consider that the script will search ~/.openclaw/workspace/.env by default.

Persistence & Privilege

always is false and the skill is user-invocable; it does not request persistent privileges or modify other skills/configuration. Autonomous invocation is allowed (platform default) but not a unique elevation here.

What to consider before installing

This skill appears to implement a Bandwidth CLI and only needs a Bandwidth API token and account id, which is reasonable — but take these precautions before installing: 1) Inspect or run the script in an isolated environment; it will call messaging.bandwidth.com only, but verify network requests match your expectations. 2) Do not point WORKSPACE at a directory containing unrelated secrets: the script will try to read a .env file (default ~/.openclaw/workspace/.env) to obtain credentials. 3) The script has a bug: argparse stores --from into args.from_addr but the code looks for args.from; expect command failures or incorrect behavior — either fix the argument names or contact the author. 4) Use a dedicated Bandwidth API token with minimal scope, and avoid reusing high-privilege credentials. 5) Verify the skill author/homepage (agxntsix.ai) if provenance matters. If you need this functionality but want lower risk, consider using a well-maintained official Bandwidth SDK or a vetted third-party integration.

Bandwidth — messaging, voice calls, phone numbers, and 911 services.

Requirements

Variable	Required	Description
BANDWIDTH_API_TOKEN	✅	Bandwidth API token
BANDWIDTH_ACCOUNT_ID	✅	Account ID

Quick Start

# Send SMS/MMS
python3 {{baseDir}}/scripts/bandwidth.py send-message --from <value> --to <value> --text <value> --application-id <value>

# List messages
python3 {{baseDir}}/scripts/bandwidth.py list-messages --from <value> --to <value>

# Create outbound call
python3 {{baseDir}}/scripts/bandwidth.py create-call --from <value> --to <value> --answer-url <value> --application-id <value>

# Get call details
python3 {{baseDir}}/scripts/bandwidth.py get-call <id>

# List phone numbers
python3 {{baseDir}}/scripts/bandwidth.py list-numbers

# Search available numbers
python3 {{baseDir}}/scripts/bandwidth.py search-numbers --area-code <value> --quantity "10"

# Order phone number
python3 {{baseDir}}/scripts/bandwidth.py order-number --numbers "comma-separated"

# List applications
python3 {{baseDir}}/scripts/bandwidth.py list-applications

Output Format

All commands output JSON by default.

Script Reference

Script	Description
{baseDir}/scripts/bandwidth.py	Main CLI — all commands in one tool

Credits

Built by M. Abidi | agxntsix.ai YouTube | GitHub Part of the AgxntSix Skill Suite for OpenClaw agents.

📅 Need help setting up OpenClaw for your business? Book a free consultation