ClawAudit verdict
clawvoice
Phone call workflow skill via Twilio/Telnyx with explicit guardrails; behavior matches stated telephony purpose and instructs treating voice sessions as untrusted input.
⚠ Flagged for review — coarse, uncorroborated signal, not a confirmed exploit. Review the config yourself before installing.
Automated static analysis — not a human review. ClawAudit flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
Findings (9)
HTTP request to bare IP address — common in malicious payloads
README.md · code · http://127.0.0.1
References tunneling service
SKILL.md · code · ngrok
Dynamic import() — loads module at runtime
dist/transport/media-session-handler.d.ts · prose · downgraded · import("
References child_process — can spawn system processes
dist/tunnel/tailscale.js · prose · downgraded · child_process
References agent memory files
README.md · code · MEMORY.md
Opens WebSocket connection
SKILL.md · prose · downgraded · WebSocket
References webhook/callback URL
dist/telephony/twilio.js · prose · downgraded · WebhookUrl
Base64 encoding/decoding
dist/transport/audio-convert.d.ts · prose · downgraded · base64-encode
Node http/https module — low-level network access
dist/transport/media-stream-server.js · prose · downgraded · require("http")
Permissions & capabilities
No declared permissions — minimal attack surface.
network_in Is this flag fair?
Thanks — recorded.