twilio-sms
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of the Twilio CLI (
npx -y twilio-cli) andcurlto interact with the Twilio REST API. These commands are necessary for the skill's primary purpose of managing SMS and phone numbers. - [EXTERNAL_DOWNLOADS]: Uses
npx -y twilio-cliwhich downloads and executes the official Twilio CLI package from the npm registry. This is a well-known service and the tool is standard for this integration. - [CREDENTIALS_SAFE]: The skill includes specific safety instructions to prevent the exposure of Account SIDs, auth tokens, and other secrets. It recommends using
$one-passwordfor secret reads andenv -u OP_SERVICE_ACCOUNT_TOKENfor desktop access, which are recognized best practices for secure credential handling.
Audit Metadata