Sip Voice Call Control

Voice interface using Telnyx Call Control API. Answer phone calls with AI, function calling, and natural conversation. Use for hands-free assistant access, phone-based reminders, or voice-controlled tools. Requires Node.js and Telnyx API key.

This skill is plausible for Telnyx voice handling, but it does a few surprising things you should evaluate before installing: - Review the code yourself (src/tunnel.ts and src/dev.ts). It will attempt to start a cloudflared tunnel and create/update Telnyx Call Control Applications using your TELNYX_API_KEY — that will publish a webhook URL and may create SIP subdomains in your Telnyx account. - The skill reads workspace files (IDENTITY.md, USER.md) and also tries to read ~/.openclaw/openclaw.json and ~/.clawdbot/clawdbot.json to obtain a gateway URL and token. If you have other agent/CLI tools installed, this could allow the skill to use existing gateway credentials. If those files contain tokens for other services, consider running the skill in an isolated environment (container/VM) or remove/rotate those tokens first. - The code spawns local CLIs and arbitrary child processes to implement tools (send_message, reminders). Only run it on machines where you trust installed command-line tools; do not run on machines with sensitive credentials/configs. - The metadata omitted cloudflared and local CLI requirements. Ensure cloudflared is installed if you expect automatic tunneling, or disable the tunnel and provide a manually configured publicly reachable webhook. - Least-privilege advice: give the TELNYX_API_KEY only the minimum permissions needed (voice/call-control), and avoid running on hosts that contain other service tokens. Prefer testing in an isolated environment first and inspect logs and network traffic (or audit code) before deploying to production.

Type: OpenClaw Skill Name: telnyx-voice-sip Version: 1.0.0 The skill is classified as suspicious due to several vulnerabilities that could be exploited for unauthorized actions. Specifically, the `addReminder` function in `src/dev.ts` constructs a shell command using user-provided input (`time` parameter) without sufficient sanitization, posing a shell injection risk. Additionally, the `sendMessage` function in `src/dev.ts` forwards user-controlled content as a prompt to a local gateway agent, creating a prompt injection vector against that agent. Finally, the `loadPersonalization` function in `src/dev.ts` incorporates content from `IDENTITY.md` and `USER.md` directly into the voice LLM's system prompt, presenting a prompt injection risk if these files are compromised.