The Agent Skills Directory

[SAFE]: The skill demonstrates secure coding practices by utilizing os.environ to retrieve sensitive credentials such as TWILIO_ACCOUNT_SID and TWILIO_AUTH_TOKEN, rather than hardcoding them.
[SAFE]: The IVR implementation includes a RequestValidator decorator to ensure that incoming HTTP requests originate from Twilio, preventing unauthorized manipulation of voice workflows.
[SAFE]: The 'Sharp Edges' section explicitly warns against hardcoding credentials and emphasizes the criticality of signature validation, aligning with industry security standards for webhook handling.
[INDIRECT_PROMPT_INJECTION]: The skill processes user input via phone numbers and SMS body content, which are typical ingestion points for communication skills. However, the logic is limited to transactional messaging and standard validation, posing no significant risk to the agent's internal state.

twilio-communications