clawring

SUSPICIOUS: The skill is purpose-aligned as a phone-calling integration and does not show classic malware or installer abuse, but it grants an agent autonomous outbound calling and routes sensitive voice/transcript data through a managed third-party service and subprocessors. Credential scope is narrow and proportionate, yet the opaque pasted setup prompt and real-world action capability raise meaningful security risk.