twilio-communications
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or security vulnerabilities were identified during the analysis of the skill instructions and code snippets.
- [CREDENTIALS_UNSAFE]: The skill demonstrates secure development practices by retrieving Twilio credentials (Account SID, Auth Token) and phone numbers from environment variables rather than hardcoding sensitive information.
- [EXTERNAL_DOWNLOADS]: The skill references standard, well-known libraries such as the official Twilio Python SDK and the Flask web framework. There are no unverified remote downloads or executions.
- [COMMAND_EXECUTION]: No evidence of arbitrary command execution, shell spawning, or unsafe use of subprocesses was found.
- [DATA_EXFILTRATION]: The code snippets focus on legitimate communication workflows (SMS, 2FA, IVR) and do not contain patterns suggesting unauthorized data harvesting or transmission to unknown endpoints.
Audit Metadata