The Agent Skills Directory

[SAFE]: The skill correctly uses environment variables (os.environ) to manage sensitive Twilio credentials (Account SID, Auth Token) and phone numbers, avoiding hardcoded secrets.
[SAFE]: The IVR implementation includes a validate_twilio_request decorator that uses Twilio's RequestValidator to verify the authenticity of incoming webhooks via the X-Twilio-Signature header.
[SAFE]: The skill interacts exclusively with official Twilio API endpoints, which is a well-known and trusted communication service.
[SAFE]: The patterns include basic input validation, such as E.164 format verification for phone numbers using regular expressions.
[SAFE]: The documentation explicitly warns against common pitfalls, such as hardcoding credentials and failing to validate webhook signatures.

twilio-communications