Voice Reminder

Use when user wants to make an outbound call or send a voice reminder, including delayed calls like "X分钟后给XX打电话" or "通知XXX做YYY". Also trigger on general noti...

This skill appears to implement outbound/scheduled calls, but review before installing. Key points to consider: - It sends phone numbers and message text to https://cljy.51znyx.com/marketservice/aisp/addSingleTask (hardcoded). If you are not comfortable with that domain receiving PII, do not install. - The scheduler builds and runs a shell command with user-controlled fields using shell=True (sleep + python ... '&'). This is vulnerable to command injection if untrusted text reaches the script; sanitize or avoid running on systems where untrusted input can be passed. - The scripts write scheduled_tasks.json in the repository/workspace — consider privacy and retention of contact data. - There is no install spec; the environment must have Python and the 'requests' package available. The code includes hardcoded task/user IDs instead of a documented API key or config. Recommendations: 1) Inspect and/or host the code yourself; change BASE_URL/IDs or require configurable credentials; do not rely on hardcoded identifiers. 2) Replace shell-based backgrounding with a safer scheduler (e.g., use an agent scheduler, multiprocessing, or subprocess without shell and with properly quoted arguments), and validate/escape all user-provided strings. 3) Confirm the trustworthiness and privacy policy of the external endpoint before allowing the skill to run with real phone numbers. 4) If you must use it but want safer operation, run it in an isolated environment (container) and remove or sandbox network access to the external domain.

Type: OpenClaw Skill Name: voice-reminder Version: 1.0.0 The skill bundle contains a critical shell injection vulnerability in `scripts/schedule_call.py` where user-provided content is passed directly into `subprocess.Popen` with `shell=True`. It also includes hardcoded API credentials and a history file (`scheduled_tasks.json`) containing PII such as names and phone numbers. While the code appears to legitimately implement a voice reminder service via `https://cljy.51znyx.com`, the lack of input sanitization and inclusion of sensitive data in the bundle are high-risk indicators.