37/100 (High)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： suspicious

OpenClaw： suspicious

The skill's behavior (automatically signing into ElevenLabs via a browser session, creating/storing API keys, and notifying via Telegram) is plausible for a voice agent but the published metadata, dec...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： suspicious

Detected: suspicious.prompt_injection_instructions

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773705258796,
        "_id": "k974tywda25zrj23a2r7pb1y6d830dxz",
        "changelog": "Voice Agent 1.0.0 — Major overhaul: now fully automates voice cloning, ElevenLabs setup, and conversational AI calling, with self-configuration and Telegram notifications.\n\n- Full migration from local API & Whisper\/AWS Polly to ElevenLabs: agent now clones voice, generates MP3s, and runs calls via Twilio.\n- Autonomous self-configuration: navigates ElevenLabs dashboard via virtual-desktop to generate API keys, clone principal’s voice, and create agents.\n- Local scripts and legacy audio handling removed; all config handled in config.json, voice_generator.py, and supporting docs.\n- Sends Telegram updates on configuration, voice readiness, audio generation, and call outcomes.\n- No manual API key setup required: agent fetches credentials and completes onboarding autonomously.\n- Supports audio-driven workflows, scalable text-to-speech, and automated inbound\/outbound calls.",
        "changelogSource": "user",
        "createdAt": 1773705258796,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Wesley Armando",
        "handle": "georges91560",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/130360599?v=4",
        "kind": "user",
        "linkedUserId": "kn72f14t9tgxbkpxj5b28scycs808stb"
    },
    "ownerHandle": "georges91560",
    "skill": {
        "_creationTime": 1773705258796,
        "_id": "kd76mb83vvnj9geegv06kdwhsh830ggg",
        "badges": [],
        "createdAt": 1773705258796,
        "displayName": "Voice Agent",
        "latestVersionId": "k974tywda25zrj23a2r7pb1y6d830dxz",
        "ownerUserId": "kn72f14t9tgxbkpxj5b28scycs808stb",
        "slug": "voice-agent-v1",
        "stats": {
            "comments": 0,
            "downloads": 52,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Enables autonomous cloning of your voice via ElevenLabs, converts text to speech, and deploys AI voice agents for automated inbound\/outbound calls with Twili...",
        "tags": {
            "#audio-content": "k974tywda25zrj23a2r7pb1y6d830dxz",
            "#autonomous-agent": "k974tywda25zrj23a2r7pb1y6d830dxz",
            "#elevenlabs": "k974tywda25zrj23a2r7pb1y6d830dxz",
            "#inbound-calls": "k974tywda25zrj23a2r7pb1y6d830dxz",
            "#lead-qualification": "k974tywda25zrj23a2r7pb1y6d830dxz",
            "#outbound-calls": "k974tywda25zrj23a2r7pb1y6d830dxz",
            "#phone-calls": "k974tywda25zrj23a2r7pb1y6d830dxz",
            "#podcast": "k974tywda25zrj23a2r7pb1y6d830dxz",
            "#self-configuring": "k974tywda25zrj23a2r7pb1y6d830dxz",
            "#tts": "k974tywda25zrj23a2r7pb1y6d830dxz",
            "#twilio": "k974tywda25zrj23a2r7pb1y6d830dxz",
            "#voice": "k974tywda25zrj23a2r7pb1y6d830dxz",
            "#voice-clone": "k974tywda25zrj23a2r7pb1y6d830dxz",
            "#vsl": "k974tywda25zrj23a2r7pb1y6d830dxz",
            "latest": "k974tywda25zrj23a2r7pb1y6d830dxz"
        },
        "updatedAt": 1774335559545
    }
}