Skill audit report
ai-calls-china-phone Audit report.
AI 外呼、机器人外呼、智能外呼与 AI 电话 Skill。当用户说“帮我打电话”“打电话给商家”“预约电话”，或需要电话机器人完成通知、预约、咨询和经授权的客户回访时使用。支持直接拨打国内手机号、中文通话、逐次确认、AI 呼入接待、智能体、实时转写、通话记录、余额和费用查询。
OpenAgentSkill Trust Score
OpenAgentSkill Trust Score
The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.
GitHub adoption
FAIL30
12 GitHub stars
Stars/forks activity
FAIL32
12 stars, 2 forks; issue activity unavailable in current metadata
Recent maintenance
PASS88
2mo since push
License clarity
PASS86
MIT-0
README/SKILL.md completeness
PASS94
Metadata includes enough usage and workflow context
Dependency/runtime risk
WARN46
command execution surface, credential or environment access
Install availability
PASS92
npx skills add ustczz/openclaw-ai-calls-china-phone --skill ai-calls-china-phone
Install command safety
PASS92
standard package or runtime install path
Permission surface
FAIL36
secrets or environment access, shell or command execution
Repository evidence
PASS86
https://github.com/ustczz/openclaw-ai-calls-china-phone/blob/main/SKILL.md
Review status
INFO66
AI review data available
Agent Proven outcomes
INFO54
No agent outcome data yet
Checks
Install and adoption review
Install path
92
npx skills add ustczz/openclaw-ai-calls-china-phone --skill ai-calls-china-phone
Repository
88
https://github.com/ustczz/openclaw-ai-calls-china-phone/blob/main/SKILL.md
License
86
MIT-0
Maintenance
88
2mo since push
AI review
55
SKILL.md excerpt is truncated in the review, but the provided content appears complete and well-structured.
README/SKILL.md completeness
94
Usable description available
Dependency risk
46
command execution surface, credential or environment access
Install command safety
92
standard package or runtime install path
Permission surface
36
secrets or environment access, shell or command execution
Stars/forks activity
32
12 stars, 2 forks; issue activity unavailable in current metadata
Adoption
42
12 GitHub stars
Warnings
- Dependency or permission surface needs review
- Permission surface may require sandboxing
- SKILL.md excerpt is truncated in the review, but the provided content appears complete and well-structured.
- The skill performs real outbound phone calls which inherently carries risk of misuse; however, it enforces explicit confirmation per call and prohibits batch calling.
- API responses and call transcripts are treated as untrusted data, and the skill explicitly forbids executing them as instructions, which is a strong security control.
- Low GitHub adoption signal
- Quality score needs review
- Permission surface needs review: secrets or environment access, shell or command execution
- GitHub adoption: 12 GitHub stars
- Stars/forks activity: 12 stars, 2 forks; issue activity unavailable in current metadata
- Dependency/runtime risk: command execution surface, credential or environment access
- Permission surface: secrets or environment access, shell or command execution
Method
This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.
Compare nearby options
Related skills to audit next
article-writing
Write articles, guides, blog posts, tutorials, newsletter issues, and other long-form content in a distinctive voice derived from supplied examples or brand guidance. Use when the user wants polished written content longer than a paragraph, especially when voice consistency, structure, and credibility matter.
272K Stars · Audit report
extension-points
Own MSBuild import and hook discovery. USE FOR: CustomBefore/CustomAfter hooks, ordered wildcard and NuGet auto-imports, control properties, build/buildTransitive packed layout, package ID and file-name matching, per-TFM forwarders, and tracing why assets or hooks are missing, broken, or replaced. An import guard remains in scope when it is one defect in a broader hook/import flow. DO NOT USE for a focused safety verdict on whether one specific Import needs Exists or is an intentionally unguarded package contract; use msbuild-antipatterns. NEVER INVOKE when imports and hook placement already work and the request is only target Inputs/Outputs, incremental skipping, or FileWrites clean tracking; use incremental-build or target-authoring. Exclude props-versus-targets placement and non-MSBuild systems.
5.6K Stars · Audit report
openadapt-gui-write
Your AI agent decides what to enter. OpenAdapt enters it in the app and checks that it saved.
1.8K Stars · Audit report