twilio-communications-v3

Enables building communication features with Twilio, including SMS, voice calls, and user verification, while preserving workflow integrity.

Install this skill

or

0/100

Security score

The twilio-communications-v3 skill was audited on May 30, 2026 and we found 35 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 115

Webhook reference - potential data exfiltration

SourceSKILL.md

115	status_callback: URL for delivery status webhooks

medium line 174

Webhook reference - potential data exfiltration

SourceSKILL.md

174	status_callback="https://your-app.com/webhooks/twilio/status"

medium line 369

Webhook reference - potential data exfiltration

SourceSKILL.md

369	Key insight: Twilio makes HTTP request to your webhook, you return

medium line 640

Webhook reference - potential data exfiltration

SourceSKILL.md

640	# Flask webhook for incoming WhatsApp messages

medium line 645

Webhook reference - potential data exfiltration

SourceSKILL.md

645	@app.route("/webhooks/whatsapp", methods=["POST"])

medium line 646

Webhook reference - potential data exfiltration

SourceSKILL.md

646	def whatsapp_webhook():

medium line 692

Webhook reference - potential data exfiltration

SourceSKILL.md

692	### Webhook Handler Pattern

medium line 694

Webhook reference - potential data exfiltration

SourceSKILL.md

694	Handle Twilio webhooks for delivery status, incoming messages,

medium line 697

Webhook reference - potential data exfiltration

SourceSKILL.md

697	Twilio sends webhooks for:

medium line 717

Webhook reference - potential data exfiltration

SourceSKILL.md

717	CRITICAL: Always use this for webhook endpoints.

medium line 739

Webhook reference - potential data exfiltration

SourceSKILL.md

739	@app.route("/webhooks/twilio/sms/status", methods=["POST"])

medium line 771

Webhook reference - potential data exfiltration

SourceSKILL.md

771	@app.route("/webhooks/twilio/sms/incoming", methods=["POST"])

medium line 802

Webhook reference - potential data exfiltration

SourceSKILL.md

802	@app.route("/webhooks/twilio/voice/status", methods=["POST"])

medium line 860

Webhook reference - potential data exfiltration

SourceSKILL.md

860	- Exposing webhook URLs without authentication

medium line 862

Webhook reference - potential data exfiltration

SourceSKILL.md

862	- Blocking webhook response (should be fast)

low line 1165

Webhook reference - potential data exfiltration

SourceSKILL.md

1165	# In your webhook handler

low line 1166

Webhook reference - potential data exfiltration

SourceSKILL.md

1166	@app.route("/webhooks/sms/incoming", methods=["POST"])

medium line 1310

Webhook reference - potential data exfiltration

SourceSKILL.md

1310	### Not Validating Webhook Signatures

medium line 1314

Webhook reference - potential data exfiltration

SourceSKILL.md

1314	Situation: Receiving Twilio webhook callbacks

medium line 1317

Webhook reference - potential data exfiltration

SourceSKILL.md

1317	Attackers send fake webhooks to your endpoint. Fraudulent transactions

medium line 1321

Webhook reference - potential data exfiltration

SourceSKILL.md

1321	Twilio signs all webhook requests with X-Twilio-Signature header.

medium line 1322

Webhook reference - potential data exfiltration

SourceSKILL.md

1322	If you don't validate this, anyone who knows your webhook URL can

low line 1341

Webhook reference - potential data exfiltration

SourceSKILL.md

1341	"""Decorator to validate Twilio webhook requests."""

low line 1361

Webhook reference - potential data exfiltration

SourceSKILL.md

1361	@app.route("/webhooks/twilio", methods=["POST"])

low line 1363

Webhook reference - potential data exfiltration

SourceSKILL.md

1363	def twilio_webhook():

medium line 1441

Webhook reference - potential data exfiltration

SourceSKILL.md

1441	#### Imported: Incoming message webhook

low line 1444

Webhook reference - potential data exfiltration

SourceSKILL.md

1444	@app.route("/webhooks/whatsapp", methods=["POST"])

medium line 1634

Webhook reference - potential data exfiltration

SourceSKILL.md

1634	### Webhook Without Signature Validation

medium line 1638

Webhook reference - potential data exfiltration

SourceSKILL.md

1638	Twilio webhooks must validate X-Twilio-Signature

medium line 1640

Webhook reference - potential data exfiltration

SourceSKILL.md

1640	Message: Webhook without signature validation. Add RequestValidator check.

medium line 1706

Webhook reference - potential data exfiltration

SourceSKILL.md

1706	- user needs high-volume messaging -> devops (Scale webhooks, monitor delivery rates)

medium line 1377

Ngrok tunnel reference

SourceSKILL.md

1377	# If using ngrok, URL changes each restart

low line 174

External URL reference

SourceSKILL.md

174	status_callback="https://your-app.com/webhooks/twilio/status"

low line 500

External URL reference

SourceSKILL.md

500	url="https://your-app.com/voice/outbound-message",

low line 501

External URL reference

SourceSKILL.md

501	status_callback="https://your-app.com/voice/status"

Scanned on May 30, 2026

View Security Dashboard

Installation guide →

GitHub Stars 58

Rate this skill

Categorymarketing

UpdatedOctober 27, 2026

claude-code cursor gemini-cli opencode api growth-marketer product-marketer customer-success-manager sales-engineer technical-writer twilio github gitlab bitbucket marketing sales content media

diegosouzapw/awesome-omni-skills