twilio-call-recordings
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing official Twilio libraries (twilio) and standard framework packages (flask, requests, express). These are recognized packages from a trusted service provider and are appropriate for the skill's purpose.
- [DATA_EXFILTRATION]: The skill demonstrates how to fetch recording audio from Twilio's API and save it to the local file system. This is a core functional feature of the skill and is performed using official, authenticated API calls to Twilio's infrastructure.
- [INDIRECT_PROMPT_INJECTION]: The skill describes handling webhooks which process external data. It correctly addresses the associated security risk by advising developers to validate the X-Twilio-Signature header to ensure the integrity and authenticity of the incoming data.
Audit Metadata