twilio-isv-sms-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill acts as a best-practices guide for SaaS developers, promoting strong security postures such as:
- Implementing one Twilio subaccount per customer to ensure credential and compliance isolation.
- Using dedicated per-customer API keys to limit the impact of potential compromises.
- Recommending the encryption of sensitive credentials at rest.
- [EXTERNAL_DOWNLOADS]: Mentions the official
twiliolibrary for installation via standard package managers (pip,npm). These are expected dependencies for a skill authored by the vendor and do not pose an external threat. - [CREDENTIALS_UNSAFE]: References standard Twilio environment variables (
TWILIO_ACCOUNT_SID,TWILIO_AUTH_TOKEN) but provides correct guidance on referring to secure IAM setups rather than hardcoding values.
Audit Metadata