
Security News
TC39 Advances Temporal to Stage 4 Alongside Several ECMAScript Proposals
TC39’s March 2026 meeting advanced eight ECMAScript proposals, including Temporal reaching Stage 4 and securing its place in the ECMAScript 2026 specification.
@skillhq/concierge
Advanced tools
Personal AI concierge for contact lookup, availability checks, and autonomous phone calls
Personal AI concierge for contact lookup, availability checks, and autonomous phone calls.
skill install @skillhq/concierge
AI calls require local binaries in addition to API keys:
ffmpeg (must include MP3 decode support)ngrok (used when call auto-starts infrastructure)Install examples:
# macOS
brew install ffmpeg ngrok
# Ubuntu/Debian (including ARM VPS)
sudo apt-get update
sudo apt-get install -y ffmpeg
# install ngrok from ngrok docs, then verify `ngrok version`
Verify locally:
ffmpeg -version
ffmpeg -decoders | rg -i mp3
ngrok version
The call preflight now fails fast with a clear error if these dependencies are missing or if ffmpeg cannot decode MP3.
concierge find-contact "https://www.airbnb.com/rooms/12345"
concierge call "+1-555-123-4567" \
--goal "Book a room for March 12-14" \
--name "John Smith" \
--email "john@example.com" \
--customer-phone "+1-555-000-1111"
Configuration is stored in ~/.config/concierge/config.json5.
concierge config set googlePlacesApiKey "your-key"
concierge config set twilioAccountSid "<sid>"
concierge config set twilioAuthToken "<token>"
concierge config set twilioPhoneNumber "+14155551234"
concierge config set deepgramApiKey "<key>"
concierge config set elevenLabsApiKey "<key>"
concierge config set elevenLabsVoiceId "EXAVITQu4vr4xnSDxMaL"
concierge config set anthropicApiKey "<key>"
See SKILL.md and CALL-SETUP.md for full setup and troubleshooting.
MIT
FAQs
Personal AI concierge for contact lookup, availability checks, and autonomous phone calls
The npm package @skillhq/concierge receives a total of 33 weekly downloads. As such, @skillhq/concierge popularity was classified as not popular.
We found that @skillhq/concierge demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
TC39’s March 2026 meeting advanced eight ECMAScript proposals, including Temporal reaching Stage 4 and securing its place in the ECMAScript 2026 specification.

Research
/Security News
Since January 31, 2026, we identified at least 72 additional malicious Open VSX extensions, including transitive GlassWorm loader extensions targeting developers.

Research
Six malicious Packagist packages posing as OphimCMS themes contain trojanized jQuery that exfiltrates URLs, injects ads, and loads FUNNULL-linked redirects.