通义晓蜜 - 智能外呼

触发阿里云晓蜜外呼机器人任务，自动批量拨打电话。适用于批量外呼、客户回访、满意度调查、简历筛查约面试等场景。可从前置工具或节点获取外呼名单。

This skill appears to implement Alibaba Cloud outbound-calling functionality and does require your ALIYUN AccessKey ID and Secret to operate, but the registry metadata fails to declare those env variables and the package contains a large bundled JS file. Before installing or running: 1) Confirm the publisher identity and source (no homepage provided). 2) Inspect scripts/bundle.js (or run it in a sandbox) to ensure there are no unexpected network endpoints or exfiltration behavior. 3) Only provide ALIYUN_* credentials you are willing to expose to this code; consider using a limited-permission account. 4) Test with non-sensitive phone numbers and verify the skill prompts for explicit confirmation before any call. 5) Ensure you comply with local regulations on automated calling and consent. If you need to proceed but lack the ability to audit the bundle, treat this as higher risk and avoid supplying real credentials or running in production.

Type: OpenClaw Skill Name: xiaomi-outbound-call Version: 1.0.1 The skill enables bulk outbound calls via Alibaba Cloud, which is a high-risk capability. It requires sensitive Alibaba Cloud AccessKey credentials (`ALIYUN_OUTBOUND_BOT_ACCESS_KEY_ID`, `ALIYUN_OUTBOUND_BOT_ACCESS_KEY_SECRET`) to be configured as environment variables (`SKILL.md`, `references/config.md`). While the core function is risky, the `SKILL.md` explicitly instructs the AI agent to obtain **mandatory user confirmation** before initiating any outbound calls, significantly mitigating the risk of unauthorized use. There is no clear evidence of intentional harmful behavior like data exfiltration or persistence, but the inherent risk of automated bulk calling warrants a 'suspicious' classification.