updated 03:25 pm EST, Tue November 9, 2010
Problem may be fundamental to iOS
iOS is allowing webpages to dial Skype calls without confirmation, a report says. Typically, when the mobile version of Safari encounters a "tel://" extension prompting it to start a conventional phone call, a pop-up window allows people to confirm or cancel. HTML using the "skype://" extension, however, can force a device to load Skype and dial without any extra prompting.
Although launching Skype poses a relatively minor security threat, the issue could extend to other apps. The problem may in fact be endemic to Safari and iOS, since Skype can't respond to a call request until after Safari is closed. Skype would have to detect Safari as a source of calls in order to provide its own confirmation window.