twilio-lookup-phone-intelligence
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill exclusively documents usage of official Twilio APIs and libraries.
- [CREDENTIALS_UNSAFE]: The skill identifies the need for credentials (
TWILIO_ACCOUNT_SID,TWILIO_AUTH_TOKEN) but correctly instructs the user to manage them via environment variables and refers to separate setup documentation for best practices, avoiding hardcoded secrets. - [COMMAND_EXECUTION]: The skill mentions installation of the official
twiliolibrary viapipandnpm, which are standard package management operations for the intended vendor SDK. - [INDIRECT_PROMPT_INJECTION]: The skill ingests phone number strings for processing by the Lookup API. The surface area for injection is low as the data is passed as a parameter to a structured API call, and the skill's function is limited to information retrieval.
Audit Metadata