中文 EN

Scan Report

Scan New Files

✓ Trusted — Risk Score 5/100
Last scan:2 days ago Rescan
5 /100
llc-phone
Low-latency inbound and outbound AI phone calls via OpenAI Realtime API and Twilio
Legitimate AI phone agent skill with no malicious indicators — all functionality is clearly documented and matches the implementation.
Skill Namellc-phone
Duration31.6s
Enginepi
✓
Safe to install
No action needed. This is a production-ready voice agent skill.

Findings 1 items

Severity Finding Location
Low
Unpinned dependency versions
package.json uses ^ version ranges (e.g., ^4.21.2, ^8.18.0) instead of exact pinned versions. While standard practice, this allows minor/patch updates silently.
"express": "^4.21.2"
→ Consider pinning to exact versions (e.g., "4.21.2") for reproducible builds. Not a security issue per se, but best practice for production skills.
 package.json:21
ResourceDeclaredInferredStatusEvidence
Filesystem NONE READ ✓ Aligned readFileSync(twimlPath) only for static TwiML template
Network READ/WRITE READ ✓ Aligned Twilio API, OpenAI WebSocket, ClickSend SMS, CalDAV calendar — all documented an…
Shell NONE NONE — No subprocess or child_process usage found
Environment NONE READ ✓ Aligned Only reads env vars for config (OPENAI_API_KEY, TWILIO_*, CLICKSEND_*, CALDAV_*)…
Skill Invoke NONE NONE — No skill self-invocation
Clipboard NONE NONE — No clipboard access
Browser NONE NONE — No browser automation
Database NONE READ ✓ Aligned CalDAV calendar via HTTP REPORT/PUT — documented as appointment booking feature
5 findings
🔗
Medium External URL 外部 URL
https://platform.openai.com/docs/changelog
docs/08-known-issues.md:130
🔗
Medium External URL 外部 URL
https://community.openai.com
docs/08-known-issues.md:131
🔗
Medium External URL 外部 URL
https://your-caldav-server.example.com
src/functionHandlers.ts:7
🔗
Medium External URL 外部 URL
https://rest.clicksend.com/v3/sms/send
src/functionHandlers.ts:397
🔗
Medium External URL 外部 URL
https://api.twilio.com/2010-04-01/Accounts/$
src/functionHandlers.ts:424

File Tree

19 files · 124.4 KB · 3676 lines
TypeScript 5f · 1968L Markdown 11f · 1643L JSON 2f · 57L XML 1f · 8L
├─ ▾ 📁 docs
│ ├─ 📝 01-overview.md Markdown 44L · 1.9 KB
│ ├─ 📝 02-session-config.md Markdown 177L · 5.0 KB
│ ├─ 📝 03-prewarm-outbound.md Markdown 237L · 7.4 KB
│ ├─ 📝 04-inbound-modes.md Markdown 274L · 9.1 KB
│ ├─ 📝 05-async-tools.md Markdown 146L · 5.1 KB
│ ├─ 📝 06-latency-tuning.md Markdown 103L · 3.5 KB
│ ├─ 📝 07-twilio-integration.md Markdown 114L · 3.5 KB
│ ├─ 📝 08-known-issues.md Markdown 132L · 3.8 KB
│ └─ 📝 09-openclaw-config.md Markdown 140L · 4.3 KB
├─ ▾ 📁 src
│ ├─ 📜 functionHandlers.ts TypeScript 564L · 19.3 KB
│ ├─ 📜 server.ts TypeScript 397L · 14.6 KB
│ ├─ 📜 sessionManager.ts TypeScript 929L · 32.8 KB
│ ├─ 📄 twiml.xml XML 8L · 187 B
│ ├─ 📜 types.ts TypeScript 31L · 614 B
│ └─ 📜 webhook.ts TypeScript 47L · 1.3 KB
├─ 📋 package.json JSON 39L · 974 B
├─ 📝 README.md Markdown 176L · 5.6 KB
├─ 📝 SKILL.md Markdown 100L · 4.9 KB
└─ 📋 tsconfig.json JSON 18L · 419 B

Dependencies 5 items

PackageVersionSourceKnown VulnsNotes
express ^4.21.2 npm No Unpinned minor version
ws ^8.18.0 npm No Unpinned minor version
dotenv ^16.4.5 npm No Unpinned minor version
cors ^2.8.5 npm No Unpinned minor version
typescript ^5.5.4 npm No Dev dependency, unpinned

Security Positives

✓ No subprocess/child_process usage — pure Node.js application
✓ No eval(), no base64 decode-into-shell, no dynamic code execution
✓ No credential harvesting — only reads env vars for legitimate service authentication
✓ No sensitive local path access (~/.ssh, ~/.aws, .env files)
✓ No curl|bash or wget|sh remote script execution
✓ SKILL.md documentation accurately describes all implemented functionality
✓ All external API calls (Twilio, OpenAI, ClickSend, CalDAV) are declared and necessary for the voice agent feature
✓ WebSocket/Webhook exfiltration only occurs to user-configured TRANSCRIPT_WEBHOOK_URL (opt-in, disabled by default)
✓ No hidden functionality in HTML comments or disguised code
✓ TypeScript source is clean and readable — no obfuscation
✓ Uses standard, well-audited dependencies (express, ws, cors)