agentphone

SUSPICIOUS: The skill is internally consistent and uses same-org official endpoints, so it does not look like credential theft or supply-chain malware. However, it grants an AI agent high-impact real-world communication powers—autonomous calls, texts, and webhook-driven conversations—which creates substantial abuse and consent risk even with otherwise coherent data flows.