twilio-agent-connect
Integrates third-party LLM agent runtimes with Twilio's communication services for enhanced customer interactions.
Install this skill
Security score
The twilio-agent-connect skill was audited on May 24, 2026 and we found 19 security issues across 4 threat categories, including 1 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 183 | const systemPrompt = SYSTEM_INSTRUCTIONS + (memoryContext ? `\n\n${memoryContext}` : ''); |
Template literal with variable interpolation in command context
| 428 | const systemPrompt = SYSTEM_INSTRUCTIONS + `\n\n${memoryContext}`; |
Webhook reference - potential data exfiltration
| 308 | 1. **Webhook/Connection Received** - Twilio sends webhook (messaging) or WebSocket connection (voice) |
Webhook reference - potential data exfiltration
| 347 | - Fire-and-forget webhook processing with immediate 200 response |
Webhook reference - potential data exfiltration
| 374 | @app.post("/ci-webhook") |
Webhook reference - potential data exfiltration
| 375 | async def ci_webhook_handler(request: Request): |
Webhook reference - potential data exfiltration
| 498 | - Use immediate 200 responses for webhooks to prevent retries |
Webhook reference - potential data exfiltration
| 506 | - Implement webhook signature validation (Twilio SDK provides helpers) |
Webhook reference - potential data exfiltration
| 507 | - Use HTTPS for all webhook endpoints |
Webhook reference - potential data exfiltration
| 511 | - Use ngrok for local webhook testing |
Webhook reference - potential data exfiltration
| 513 | - Implement logging for debugging webhook processing |
Webhook reference - potential data exfiltration
| 522 | - Check profile_id is present in webhook data |
Webhook reference - potential data exfiltration
| 532 | - Ensure webhook returns 200 immediately |
Ngrok tunnel reference
| 223 | TWILIO_VOICE_PUBLIC_DOMAIN=your-domain.ngrok.io |
Ngrok tunnel reference
| 511 | - Use ngrok for local webhook testing |
Access to .env file
| 454 | - Generates `.env` file with all required credentials |
External URL reference
| 433 | - **Quickstart Guide**: https://www.twilio.com/docs/platform/tac/quickstart |
External URL reference
| 434 | - **Overview Documentation**: https://www.twilio.com/docs/platform/tac/overview |
External URL reference
| 448 | make setup # Opens http://localhost:8080 |