Skip to content
← Registry
Trust Report

clawdtalk-client

ClawdTalk — Voice calls, SMS, and AI Missions for Clawdbot

80
CONDITIONAL
Format: openclawScanner: v0.8.1Duration: 38msScanned: 7h ago · Oct 5, 4:11 AMSource →
Embed this badge
AgentVerus CONDITIONAL 80AgentVerus CONDITIONAL 80AgentVerus CONDITIONAL 80
[![AgentVerus](https://agentverus.ai/api/v1/skill/4c51e952-e874-496c-9467-12a305cb4775/badge)](https://agentverus.ai/skill/4c51e952-e874-496c-9467-12a305cb4775)
Community Discussion

Community Comments

Public comments are the active feedback surface on skill reports right now. Use them to share implementation notes, edge cases, and operator context.

0 comments

Sign in to comment on this skill

No comments yet. Be the first to share your thoughts.

Continue the workflow

Keep this report moving through the activation path: rescan from the submit flow, capture real-world interactions, and wire the trust endpoint into your automation.

https://agentverus.ai/api/v1/skill/4c51e952-e874-496c-9467-12a305cb4775/trust
Personalized next commands

Use these current-skill command blocks to keep this exact report moving through your workflow.

Record an interaction
curl -X POST https://agentverus.ai/api/v1/interactions \
  -H "Authorization: Bearer at_your_api_key" \
  -H "Content-Type: application/json" \
  -d '{"agentPlatform":"openclaw","skillId":"4c51e952-e874-496c-9467-12a305cb4775","interactedAt":"2026-03-15T12:00:00Z","outcome":"success"}'
Fetch trust JSON
curl https://agentverus.ai/api/v1/skill/4c51e952-e874-496c-9467-12a305cb4775/trust

Category Scores

66
Permissions
100
Injection
42
Dependencies
75
Behavioral
90
Content
100
Code Safety

Findings (11)

highCapability contract mismatch: inferred command execution is not declared-12

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: Execute

→ Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
highUnrestricted scope detected-20

Found unrestricted scope pattern: "full access"

The WebSocket client routes calls to your gateway's main agent session, giving full access to memory, tools, and context.

→ Define clear boundaries for what the skill can and cannot do. Unrestricted scope is a security risk.

behavioralASST-09
mediumCapability contract mismatch: inferred file write is not declared-8

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: saves all IDs to the state file

→ Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
mediumCapability contract mismatch: inferred network access is not declared-6

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: https://github.com/team-telnyx/clawdtalk-client

→ Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-04
mediumCapability contract mismatch: inferred local service access is not declared-8

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: http://127.0.0.1

→ Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
mediumMany external URLs referenced (7)-8

The skill references 7 external URLs and also discusses auth/API/payment workflows, which increases the chance that sensitive operations depend on many remote endpoints.

URLs: https://github.com/team-telnyx/clawdtalk-client, https://clawdtalk.com`, https://clawdtalk.com/v1/*`, http://127.0.0.1:, https://raw.githubusercontent.com/team-telnyx/clawdtalk-client/...`...

→ Minimize external dependencies to reduce supply chain risk.

dependenciesASST-04
mediumUnknown external reference-8

The skill references an unknown external domain which is classified as medium risk. Merged overlapping signals from the repeated finding family: - Unknown external reference

https://clawdtalk.com`

→ Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
mediumLocal service URL reference-8

The skill references a localhost or private-network service URL which is classified as medium risk.

http://127.0.0.1:

→ Review localhost/private-network service references carefully. Local service URLs can expose internal apps, admin panels, or developer tooling to agent-driven workflows.

dependenciesASST-04
mediumRaw content URL reference-10

The skill references a raw content hosting service which is classified as medium risk.

https://raw.githubusercontent.com/team-telnyx/clawdtalk-client/...`

→ Use official package registries instead of raw content URLs. Raw URLs can be changed without notice.

dependenciesASST-04
mediumLocal service access detected (inside code block)-5

Found local service access pattern: "http://127.0.0.1"

| `http://127.0.0.1:<port>` | `ws-client.js` | Transcribed speech (local gateway only) |

→ Treat localhost and loopback services as privileged local attack surfaces. Require explicit approval, constrain reachable ports, and avoid combining local access with session reuse or tunneling.

behavioralASST-03
infoSafety boundaries defined

The skill includes explicit safety boundaries defining what it should NOT do.

Safety boundary patterns detected in content

→ Keep these safety boundaries. They improve trust.

contentASST-09