Ai Calls China Phone

• Analyzed: May 11, 2026, 4:58 AM
• Findings: 1
• Version: 1.0.12
• Hash: 17b399e4706c87b2969de849cfa8e194d62c1649ba1eddfa628867a3db5fb461
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a legitimate interface for making AI-powered phone calls via the Stepone AI service (open-skill-api.steponeai.com). It includes several security-conscious features, such as mandatory manual confirmation before dialing (callout.sh), strict phone number validation, and a sanitization function (sanitize_json_response) in callinfo.sh and stepone.sh designed to strip potential prompt-injection payloads from API responses. No evidence of malicious intent, data exfiltration, or unauthorized execution was found.