The Agent Skills Directory

[SAFE]: The skill provides standard and secure patterns for integrating Twilio services without any malicious intent or risky code patterns.- [DATA_EXPOSURE_AND_EXFILTRATION]: The implementation correctly uses environment variables (e.g., TWILIO_ACCOUNT_SID, TWILIO_AUTH_TOKEN, TWILIO_PHONE_NUMBER) for credential management rather than hardcoding secrets, following security best practices.- [INDIRECT_PROMPT_INJECTION]: The skill handles untrusted external data such as phone numbers and user-provided digits in IVR menus.
Ingestion points: to parameter in send_sms and Digits parameter in the Flask request handler menu_selection in SKILL.md.
Boundary markers: None explicitly present for instruction isolation, but the code context is clear.
Capability inventory: Sending SMS, initiating phone calls, and routing voice calls via Twilio REST API.
Sanitization: Includes robust regex validation for E.164 phone number formatting (r'^\+[1-9]\d{1,14}$') to prevent malformed input injection.- [COMMAND_EXECUTION]: All operations are performed via the official twilio Python library; no dangerous system command executions or subprocess calls were identified.

twilio-communications