connector-twilio

Warn

Audited by Snyk on Oct 8, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (medium risk: 0.30). The skill documents integration with the Twilio REST API to send SMS and MMS messages, configure messaging services, and manage phone numbers, which directly charges/spends real money ("it spends real money — every message is billed"). The direct operation (sendSms) requires the caller to be authenticated (if (caller.isAnonymous()) Runtime.trap("Sign in to send messages");) and enforces administrative access validation for credential and configuration setters (AccessControl.hasPermission(accessControlState, caller, #admin)), establishing independent qualifying access control.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 8, 2026, 06:50 AM
Issues
1