add-dial-tool
Give chosen NanoClaw agents a real phone number as a container tool — the `dial` CLI baked into the agent image plus OneCLI credential injection for api.getdial.ai, attached only to the agents you pick, so they can send SMS, place AI voice calls, and receive verification codes from inside the sandbox. Independent of the Dial channel; idempotent; re-run to change which agents may use it. Use when the user wants agents to text, call, or run `dial …` from a chat, without wiring Dial as a messaging channel.
88%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
Medium
Suggest reviewing before use
W009: Direct money access capability detected (payment gateways, crypto, banking).
What this means
The skill is specifically designed for direct financial operations, giving the agent the ability to move money or execute financial transactions — such as payment processing, cryptocurrency operations, banking integrations, or market order execution.
Why it was flagged
The skill's workflow installs and configures the Dial CLI and grants containerized agents the ability to place AI voice calls, send SMS, and buy phone numbers, directly spending money billed to the Dial account (direct financial operation). However, the skill documentation establishes that access and credential injection are strictly governed by OneCLI's authenticated vault and agent-grant architecture (requiring verified gateway authentication, vault secrets, and explicit agent ID grants), meeting the requirement for qualifying independent access control.
W012: Unverifiable external dependency detected (runtime URL that controls agent).
What this means
The skill fetches instructions or code from an external URL at runtime, and the fetched content directly controls the agent’s prompts or executes code. This dynamic dependency allows the external source to modify the agent’s behavior without any changes to the skill itself.
Why it was flagged
The skill installs `@getdial/cli` from npm during setup and instructs the agent to fetch documentation markdown and raw capability text directly from `docs.getdial.ai` at runtime, but the publisher provenance of the GetDial project is common/reputable unofficial rather than first-party recognized.
- Repository
nanocoai/nanoclaw
- Revision
acc2b1c
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.