voice-call
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill documents usage of the
openclawcommand-line tool to initiate voice calls and check call status. This is standard functionality for the voice-call plugin. - [INDIRECT_PROMPT_INJECTION]: The skill defines tools that ingest untrusted message data which is subsequently processed for voice output.
- Ingestion points: The
messageparameter in theinitiate_call,continue_call, andspeak_to_useractions (defined in SKILL.md). - Boundary markers: None present in the tool descriptions to delimit user-provided content.
- Capability inventory: Uses the
openclawCLI to interface with external telephony providers (Twilio, Telnyx, Plivo). - Sanitization: No mention of content sanitization or safety filtering for the message payload prior to the call initiation.
Audit Metadata