twilio-email-send
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Provides example curl commands to demonstrate API usage. These examples correctly use environment variables ($TWILIO_ACCOUNT_SID, $TWILIO_AUTH_TOKEN) for authentication, which is a security best practice to avoid hardcoding credentials.
- [DATA_EXFILTRATION]: Communication is directed exclusively to official Twilio domains (comms.twilio.com) for sending emails and tracking operations. No unauthorized external network connections were detected.
- [PROMPT_INJECTION]: The skill includes explicit agent safety guidelines, instructing the AI to always confirm recipients, subjects, and content with the user before executing a send operation. This reduces the risk of autonomous or unintended email delivery.
- [CREDENTIALS_UNSAFE]: No hardcoded API keys, tokens, or secrets were found. The documentation correctly instructs users to use their own Twilio Account SID and Auth Token or API Key SID and Secret via environment variables.
- [EXTERNAL_DOWNLOADS]: No external packages or scripts are downloaded or executed. The skill relies on standard system tools like curl for its examples.
Audit Metadata