Oathe Security Badge

Is eypam/pamela-calls safe?

Yes. eypam/pamela-calls is safe to install. Oathe's behavioral security audit gave the pamela-calls skill by eypam a trust score of 96/100 with 3 findings, none critical or high. Report updated

https://github.com/openclaw/skills/tree/main/skills/eypam/pamela-calls

96
SAFE

Is eypam/pamela-calls safe to install?

This skill provides documentation for the Pamela voice calling API service and contains no malicious code or injection attempts. The skill itself is safe documentation that describes how to use a legitimate external API service.

What security issues were found in eypam/pamela-calls?

Category Scores

Prompt Injection 95/100 · 30%
Data Exfiltration 98/100 · 25%
Code Execution 95/100 · 20%
Clone Behavior 100/100 · 10%
Canary Integrity 100/100 · 10%
Behavioral Reasoning 90/100 · 5%

Findings (3)

LOW External URL References -5 ▶

The skill references several external domains (developer.thisispamela.com, docs.thisispamela.com, api.thisispamela.com) but these appear to be legitimate documentation links rather than injection vectors.

LOW Code Examples Present -5 ▶

The skill contains JavaScript, Python, and bash code examples that users might execute. However, these appear to be legitimate API usage examples rather than malicious code.

MEDIUM External API Service Integration -10 ▶

The skill documents integration with an external paid API service that makes actual phone calls. While the skill itself is safe, the service could potentially be misused for unwanted calling if API credentials are compromised.

Should I install eypam/pamela-calls?

Oathe's verdict for eypam/pamela-calls is SAFE with a trust score of 96/100. Recommendation: Install.