twilio-call-recordings
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical guide for Twilio Call Recordings, including TwiML and SDK usage. All code snippets are educational and functional for the stated purpose.
- [COMMAND_EXECUTION]: The documentation includes standard commands for installing the official Twilio SDK via
pipandnpm. These are routine development tasks. - [DATA_EXFILTRATION]: Example code shows how to download recordings from
api.twilio.com. Since this is the official Twilio API and the skill is authored by Twilio, this is legitimate vendor functionality. - [INDIRECT_PROMPT_INJECTION]: The skill handles incoming webhook data for recording status callbacks. It includes a specific security warning and guidance on validating the
X-Twilio-Signatureheader to prevent unauthorized requests from mimicking Twilio's infrastructure.
Audit Metadata