registry / callwright / 1.0.4

callwright@1.0.4

A voice agent that places phone calls (reservations, appointments, inquiries) on your behalf, shaped by LLM direction + grounding. Runs fire-and-forget on Retell; an MCP server lets an LLM shape the grounding before each call.

AI Security Review

scanned 19h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. Runtime MCP tools can provision Retell agents and place outbound calls after explicit tool arguments. A Retell webhook may invoke a configured Claude Routine with call/task IDs; no unconsented install-time mutation was found.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Authenticated runtime MCP requests, confirmed call requests, or a verified Retell webhook.

Impact

Can create service-owned voice agents, place calls, send opted-in notifications, and wake a configured automation endpoint.

Mechanism

Retell voice-agent provisioning, calling, notifications, and optional routine trigger.

Rationale

The package is not malicious by source evidence, but it contains explicit first-party agent provisioning and configured AI-routine lifecycle behavior. This warrants a warning classification under the stated policy.

Evidence

package.jsonserver.jssetup-core.jsdispatch-core.jsroutine-core.jsnotify-core.jspaths.jsconfig.jsonagents.jsonscenario-profiles.jsonscenario-candidates.jsonretries.jsonroutine-triggers.json

Network endpoints2

api.retellai.com

callwright@1.0.4

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code