twilio-sms

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill makes extensive use of the Twilio CLI (npx -y twilio-cli) and curl to interact with the Twilio REST API. These commands are necessary for the skill's primary purpose of managing SMS and phone numbers.
  • [EXTERNAL_DOWNLOADS]: Uses npx -y twilio-cli which downloads and executes the official Twilio CLI package from the npm registry. This is a well-known service and the tool is standard for this integration.
  • [CREDENTIALS_SAFE]: The skill includes specific safety instructions to prevent the exposure of Account SIDs, auth tokens, and other secrets. It recommends using $one-password for secret reads and env -u OP_SERVICE_ACCOUNT_TOKEN for desktop access, which are recognized best practices for secure credential handling.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 10:53 AM
Security Audit — agent-trust-hub — twilio-sms