connector-twilio
Fail
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill defines dependencies on
twilio-clientandcaffeineai-authorizationvia the Mops package registry (mops.one). These are standard libraries for Motoko-based development and the platform's official package registry.- [INDIRECT_PROMPT_INJECTION]: A surface for indirect injection exists as the skill processes user-supplied phone numbers and message text. 1. Ingestion points: ThesendSmsfunction insrc/backend/mixins/twilio-messaging.moaccepts user-supplied text. 2. Boundary markers: No explicit delimiters are used to wrap user input. 3. Capability inventory: The skill utilizes network outcalls via thecreateMessageAPI. 4. Sanitization: Normalization of phone numbers to the E.164 format is recommended in the documentation. The risk is consistent with the primary purpose of a messaging connector.- [DATA_EXPOSURE]: The skill correctly implements credential management for Twilio API keys. It employs admin-only access controls and provides explicit warnings against insecure implementation patterns, such as those allowing anonymous callers to claim ownership of the canister.
Recommendations
- Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata