botcall — 技能工具
v1.0.0Phone numbers for AI agents. Provision numbers, receive SMS, extract verification codes. Use when you need to sign up for services, receive 2FA codes, or han...
0· 0·0 当前·0 累计
安全扫描
OpenClaw
安全
high confidenceThe skill's requests and instructions align with its stated purpose: it needs the botcall CLI and a BOTCALL_API_KEY to provision numbers and read SMS verification codes.
评估建议
This skill appears to be what it says: it installs a botcall CLI and uses a BOTCALL_API_KEY to provision phone numbers and read SMS codes. Before installing: (1) verify the npm package and vendor (botcall.io) and inspect the package if you need high assurance; (2) create and use a limited-scope API key and rotate/revoke it if compromised; (3) be aware that the key lets the skill read incoming SMS (which can include sensitive 2FA codes) and may incur billing charges — monitor usage and billing; (...详细分析 ▾
✓ 用途与能力
Name/description, required binary (botcall), required env var (BOTCALL_API_KEY), and the npm install entry all directly match the stated functionality of provisioning numbers and receiving SMS. No unrelated services, binaries, or credentials are requested.
✓ 指令范围
SKILL.md only instructs the agent to run the botcall CLI commands (provision, inbox, get-code, release, billing, etc.) and to place the API key in the environment or MCP config. It does not instruct the agent to read unrelated files, system secrets, or transmit data to unexpected endpoints. Note: the agent will be used to perform external signups using provisioned numbers (expected for this use case).
ℹ 安装机制
Install is via an npm package named 'botcall' that creates a 'botcall' binary — this is a standard, traceable package install from the public registry. Installing npm packages executes third-party code, so review the package and its maintainers if you require higher assurance.
✓ 凭证需求
Only a single API credential (BOTCALL_API_KEY) is required and is declared as the primary credential. This is proportionate to the skill's purpose, but that key grants access to phone numbers and received SMS (which may contain sensitive verification codes), so limit scope/rotation as appropriate.
✓ 持久化与权限
The skill does not request always:true or any elevated persistent privileges. Model invocation is allowed (platform default). Be aware that any agent with access to this skill can request numbers and read SMS while the API key is available.
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/9
● 无害
安装命令 点击复制
官方npx clawhub@latest install botcall
镜像加速npx clawhub@latest install botcall --registry https://cn.clawhub-mirror.com
技能文档
Provision phone numbers and receive SMS verification codes.
Setup
- Get an API key at https://botcall.io
- Authenticate:
botcall auth login --api-key bs_live_YOUR_KEY
Commands
Check your plan and usage
botcall usage
Provision a phone number
botcall provision
botcall provision --area-code 206 # Seattle area code
List your numbers
botcall list
View received messages
botcall inbox
botcall inbox --limit 20
Wait for verification code
botcall get-code # Wait up to 120s
botcall get-code --timeout 60 # Custom timeout
Returns just the code (e.g., 847291) for easy parsing.Release a number
botcall release
Upgrade plan
botcall upgrade starter # $9/mo - 1 number, 100 SMS
botcall upgrade pro # $29/mo - 5 numbers, 500 SMS
Manage billing
botcall billing # Opens Stripe portal
Example: Sign up for a service
# 1. Get a number
botcall provision --area-code 415
# Output: +14155551234# 2. Use number to sign up (your agent does this)
# 3. Wait for verification code
CODE=$(botcall get-code --timeout 120)
echo "Code received: $CODE"
# 4. Enter code to complete signup
MCP Integration
For Claude Desktop/Cursor, add to your MCP config:
{
"mcpServers": {
"botcall": {
"command": "npx",
"args": ["@botcallio/mcp"],
"env": {
"BOTCALL_API_KEY": "bs_live_YOUR_KEY"
}
}
}
}
Pricing
- Free: No numbers (signup only)
- Starter ($9/mo): 1 number, 100 SMS
- Pro ($29/mo): 5 numbers, 500 SMS
Links
- Website: https://botcall.io
- npm CLI: https://www.npmjs.com/package/botcall
- MCP: https://www.npmjs.com/package/@botcallio/mcp
数据来源:ClawHub ↗ · 中文优化:龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险,如需更匹配、更安全的方案,建议联系付费定制