twilio-cli-reference
Provides a comprehensive reference for managing Twilio resources via CLI, enabling SMS, email, and webhook configurations.
Install this skill
Security score
The twilio-cli-reference skill was audited on May 24, 2026 and we found 25 security issues across 3 threat categories, including 6 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Webhook reference - potential data exfiltration
| 6 | sending SMS and email, webhook configuration, local development with |
Webhook reference - potential data exfiltration
| 16 | The Twilio CLI lets you manage Twilio resources, send messages, configure webhooks, and deploy serverless functions directly from the terminal. AI coding agents can use CLI commands to provision resou |
Webhook reference - potential data exfiltration
| 66 | # Set webhooks on a number |
Webhook reference - potential data exfiltration
| 109 | ## Webhook Development |
Webhook reference - potential data exfiltration
| 112 | # Set webhook URLs on a number |
Webhook reference - potential data exfiltration
| 115 | # Emulate webhook events locally (requires plugin) |
Webhook reference - potential data exfiltration
| 116 | twilio plugins:install @twilio-labs/plugin-webhook |
Webhook reference - potential data exfiltration
| 117 | twilio webhook:invoke http://localhost:3000/sms --type sms |
Webhook reference - potential data exfiltration
| 120 | **Local development:** The CLI rejects `localhost` URLs directly. Tunneling services such as ngrok are not bundled with twilio-cli. install one separately, then set the public tunnel URL as your webho |
Webhook reference - potential data exfiltration
| 124 | - Start tunnel: ngrok http 3000, then use the provided URL for webhook |
Webhook reference - potential data exfiltration
| 180 | | `@twilio-labs/plugin-webhook` | Emulate webhook events for local testing | |
Webhook reference - potential data exfiltration
| 224 | - **Cannot use localhost URLs for webhooks** — use a tunneling service, such as ngrok, installed separately. |
Webhook reference - potential data exfiltration
| 234 | - **Webhook architecture and signature validation:** `twilio-webhook-architecture` |
Ngrok tunnel reference
| 120 | **Local development:** The CLI rejects `localhost` URLs directly. Tunneling services such as ngrok are not bundled with twilio-cli. install one separately, then set the public tunnel URL as your webho |
Ngrok tunnel reference
| 122 | ** ngrok is NOT included in the CLI — install separately: npm install -g ngrok |
Ngrok tunnel reference
| 123 | or via https://ngrok.com |
Ngrok tunnel reference
| 124 | - Start tunnel: ngrok http 3000, then use the provided URL for webhook |
Ngrok tunnel reference
| 224 | - **Cannot use localhost URLs for webhooks** — use a tunneling service, such as ngrok, installed separately. |
Ngrok tunnel reference
| 226 | - ** ngrok is not bundled with twilio-cli**, install separately |
Access to hidden dotfiles in home directory
| 211 | Config stored at `~/.twilio-cli/config.json`. |
External URL reference
| 68 | --sms-url "https://example.com/sms" \ |
External URL reference
| 69 | --voice-url "https://example.com/voice" |
External URL reference
| 113 | twilio phone-numbers:update +14155551234 --sms-url "https://your-tunnel-url.example.com/sms" |
External URL reference
| 117 | twilio webhook:invoke http://localhost:3000/sms --type sms |
External URL reference
| 123 | or via https://ngrok.com |