voice-call
Pass
Audited by Gen Agent Trust Hub on Feb 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documentation includes CLI commands using
openclaw voicecall, which is the intended mechanism for interacting with the voice plugin. - [PROMPT_INJECTION]: Identified an indirect prompt injection surface because the tool accepts arbitrary string input for the voice message. This is a functional requirement of the skill.
- Ingestion points: The
messageparameter ininitiate_call,continue_call, andspeak_to_user. - Boundary markers: No explicit markers or instructions to ignore embedded commands are present in the documentation.
- Capability inventory: The skill allows for automated voice calls and message delivery via external telephony providers.
- Sanitization: The skill does not define specific sanitization or validation logic for the message content.
Audit Metadata