voiceskill123

Start voice calls via the OpenClaw voice-call plugin.

Security Scan

The skill is a simple instruction-only adapter that tells the agent how to use an existing OpenClaw voice-call plugin and its requirements are consistent with that purpose.

Purpose & Capability

The name/description match the SKILL.md content: it documents using the OpenClaw voice-call plugin and references the plugin config and provider credentials (Twilio/Telnyx/Plivo/mock). Requiring the plugin to be enabled (plugins.entries.voice-call.enabled) is appropriate and proportional.

Instruction Scope

SKILL.md only instructs the agent to call the voice-call plugin (CLI examples and a small tool API surface). It does not instruct reading unrelated files, environment variables, or sending data to arbitrary external endpoints beyond the expected voice providers; it only documents the provider config keys the plugin needs.

Install Mechanism

There is no install spec and no code files (instruction-only). Nothing is downloaded or written to disk by the skill itself, which is the lowest-risk installation model.

Credentials

The skill declares no required environment variables or credentials. It documents that the underlying plugin needs provider credentials in its config (twilio.accountSid/authToken, telnyx.apiKey, plivo.authId/authToken, fromNumber), which is expected and not requested by the skill itself.

Persistence & Privilege

always is false (good). The skill can be invoked autonomously by the agent (default behavior) — that's normal, but be aware that autonomous invocation combined with call-sending capability can trigger outbound calls and costs if misused.

Assessment

This skill is instruction-only and appears coherent: it simply exposes the OpenClaw voice-call plugin’s capabilities. Before installing, confirm that you (or your organization) have enabled and reviewed the actual voice-call plugin implementation (source, permissions, and where provider credentials are stored). The plugin will require provider credentials (Twilio/Telnyx/Plivo) and a fromNumber in its config — provide only accounts/numbers you trust. Note that the agent may place outbound calls (which can incur charges and privacy exposure); if you’re concerned, restrict autonomous invocation or monitor call activity and credential access. If possible, verify the plugin’s source/homepage and audit its handling of secrets and network access.

Voice Call

Use the voice-call plugin to start or inspect calls (Twilio, Telnyx, Plivo, or mock).

CLI

openclaw voicecall call --to "[phone]" --message "Hello from OpenClaw"
openclaw voicecall status --call-id <id>

Tool

Use voice_call for agent-initiated calls.

Actions:

• initiate_call (message, to?, mode?)
• continue_call (callId, message)
• speak_to_user (callId, message)
• end_call (callId)
• get_status (callId)

Notes:

• Requires the voice-call plugin to be enabled.
• Plugin config lives under plugins.entries.voice-call.config.
• Twilio config: provider: "twilio" + twilio.accountSid/authToken + fromNumber.
• Telnyx config: provider: "telnyx" + telnyx.apiKey/connectionId + fromNumber.
• Plivo config: provider: "plivo" + plivo.authId/authToken + fromNumber.
• Dev fallback: provider: "mock" (no network).