connector-twilio

Fail

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: CRITICALEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill defines dependencies on twilio-client and caffeineai-authorization via the Mops package registry (mops.one). These are standard libraries for Motoko-based development and the platform's official package registry.- [INDIRECT_PROMPT_INJECTION]: A surface for indirect injection exists as the skill processes user-supplied phone numbers and message text. 1. Ingestion points: The sendSms function in src/backend/mixins/twilio-messaging.mo accepts user-supplied text. 2. Boundary markers: No explicit delimiters are used to wrap user input. 3. Capability inventory: The skill utilizes network outcalls via the createMessage API. 4. Sanitization: Normalization of phone numbers to the E.164 format is recommended in the documentation. The risk is consistent with the primary purpose of a messaging connector.- [DATA_EXPOSURE]: The skill correctly implements credential management for Twilio API keys. It employs admin-only access controls and provides explicit warnings against insecure implementation patterns, such as those allowing anonymous callers to claim ownership of the canister.
Recommendations
  • Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata
Risk Level
CRITICAL
Analyzed
Oct 22, 2026, 08:36 PM