twilio-whatsapp-send-message
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [Indirect Prompt Injection Surface]: The skill demonstrates how to interpolate user-provided content into message bodies (
bodyandmediaUrl). While this is a common messaging pattern, it represents a potential surface for indirect prompt injection if the source data is untrusted. The examples correctly prioritize using environment variables for sensitive credentials. - [Standard Package Installation]: The documentation references official library installations (
pip install twilioandnpm install twilio). These are standard requirements for using the Twilio service and originate from a well-known provider. - [Credential Management Best Practices]: The skill correctly instructs users to store sensitive information like
TWILIO_ACCOUNT_SIDandTWILIO_AUTH_TOKENin environment variables rather than hardcoding them, which aligns with industry security standards.
Audit Metadata