Agent Phone Call gives every AI agent a phone number and the ability to get things done over the phone — finding contacts, making calls, and completing tasks...
Security Analysis
medium confidenceThe skill's code and instructions largely match its stated purpose (giving an agent a phone number via PollyReach), but there are inconsistencies and privacy/credential-handling risks you should understand before installing.
The SKILL.md and scripts call only PollyReach endpoints and read/write a single credentials file (~/.config/PollyReach/key.json), which is coherent with a phone-call service. However the registry metadata lists no required binaries or file permissions while the SKILL.md explicitly requires curl, jq, bc and declares read/write access to the key file — a metadata mismatch that should be corrected.
The runtime instructions and bundled scripts stay within the phone-call domain: device registration, activation polling, sending call tasks, querying completion, checking balance, retrieving inbound messages, and updating prompts. The skill does not attempt to read other user files or arbitrary environment variables in the provided scripts.
This is an instruction-only skill with local shell scripts and no remote download/install steps. The SKILL.md suggests installing jq via brew/apt; there are no archive downloads or third-party installers in the manifest.
No platform credentials are declared in registry metadata, but the workflow requires creating and storing a long-lived token in ~/.config/PollyReach/key.json; scripts will read this token to act on behalf of the user. Storing tokens unencrypted in a home config file is common but increases risk if the machine is shared or compromised. The scripts also allow overriding the key file path with POLLYREACH_KEY_FILE, which is reasonable but worth noting.
The skill is not always-loaded and does not modify other skills or system-wide agent settings. Its persistent effect is storing a service token and using it to call PollyReach APIs — this is expected for the stated purpose but grants the skill the ability to act via the user's PollyReach account while the token is valid.
Guidance
This skill appears to do what it says: it registers an agent with PollyReach, stores a token at ~/.config/PollyReach/key.json, and uses that token to make/receive calls and query status. Before installing: (1) Verify you trust pollyreach.ai and understand their privacy/recording policies — the agent will operate using a third-party phone number and may capture call content. (2) Be aware the token is stored unencrypted in your home directory; treat it like a password. Use a disposable account if you want to limit exposure. (3) Confirm you are comfortable clicking the activation link (it ties your email/account to the service). (4) Note the registry metadata omits the declared dependencies (curl/jq/bc) and file permissions — this inconsistency should be fixed by the publisher. If you don't trust the publisher or the external service, do not install.
Latest Release
v1.0.5
No changes detected in this version. - No file or documentation changes were made. - Version remains at 1.0.0.
More by @mrsz
Published by @mrsz on ClawHub
