connector-twilio
Warn
Audited by Snyk on Oct 22, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill documents a Twilio messaging connector and client (
twilio-client@0.2.0) integrated into a canister backend, providing direct financial operations via SMS/MMS sending (Api20100401MessageApi.createMessage/sendSms) which incur real charges per message. Direct financial operations are protected by independent access controls enforced via the authorization component (AccessControl.hasPermission(accessControlState, caller, #admin)) gating credential configuration, and principal checks (caller.isAnonymous()) on send actions.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata