TelCall Twilio

Make emergency phone calls via Twilio. Use when you need to call someone and play a voice message programmatically (e.g., server down alerts, security notifi...

This skill appears to do what it says: it prompts you for Twilio credentials and saves them to ~/.openclaw/workspace/telcall-twilio/config/twilio.json (chmod 600) and then uses those credentials to POST to api.twilio.com to initiate calls. Before installing: (1) review the two scripts (they are short and human-readable) and confirm you are comfortable storing your Twilio Auth Token on disk; (2) consider creating a Twilio subaccount or API key with limited permissions and a spending limit to reduce blast radius; (3) be aware the assistant can call autonomously by default — if you want manual approval, disable autonomous invocation for the agent or require confirmation prior to calling; (4) monitor Twilio usage and rotate/revoke tokens when no longer needed; (5) if you uninstall, delete the twilio.json file to remove credentials. If any of these points are unacceptable, do not install or do not provide production credentials.

Type: OpenClaw Skill Name: telcall-twilio Version: 1.0.0 The OpenClaw skill 'telcall-twilio' is designed to make emergency phone calls via the Twilio API. All files (SKILL.md, scripts/call.sh, scripts/setup.sh) align with this stated purpose. The `setup.sh` script securely stores Twilio credentials with `chmod 600`, and `call.sh` uses `jq -sRr @uri` to safely URL-encode user messages before sending them to the Twilio API, preventing prompt or TwiML injection. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts against the OpenClaw agent. The network calls are exclusively to the legitimate Twilio API endpoint.