dialpad
Enables sending SMS and making voice calls via the Dialpad API, supporting TTS and caller ID selection for enhanced communication.
Install this skill
Security score
The dialpad skill was audited on Feb 9, 2026 and we found 18 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Webhook reference - potential data exfiltration
| 195 | ### Webhook Integration |
Webhook reference - potential data exfiltration
| 198 | from webhook_sqlite import handle_sms_webhook, format_notification, get_inbox_summary |
Webhook reference - potential data exfiltration
| 201 | result = handle_sms_webhook(dialpad_payload) |
Webhook reference - potential data exfiltration
| 221 | - For ElevenLabs TTS: `ELEVENLABS_API_KEY` + webhook setup for audio playback |
Webhook reference - potential data exfiltration
| 227 | ### 1. Real-Time: SMS Webhooks |
Webhook reference - potential data exfiltration
| 232 | # Create a webhook subscription |
Webhook reference - potential data exfiltration
| 233 | python3 create_sms_webhook.py create --url "https://your-server.com/webhook/dialpad" --direction "all" |
Webhook reference - potential data exfiltration
| 236 | python3 create_sms_webhook.py list |
Webhook reference - potential data exfiltration
| 239 | **Webhook Events:** |
Webhook reference - potential data exfiltration
| 273 | ├── create_sms_webhook.py # Create webhook subscriptions (new) |
Webhook reference - potential data exfiltration
| 276 | ├── webhook_sqlite.py # Webhook handler for SQLite |
Webhook reference - potential data exfiltration
| 278 | └── webhook_receiver.py # Legacy webhook handler |
Access to hidden dotfiles in home directory
| 159 | ~/.dialpad/sms.db # Single file with messages + FTS5 index |
External URL reference
| 4 | homepage: https://developers.dialpad.com/ |
External URL reference
| 33 | Get your Dialpad API key from [Dialpad API Settings](https://dialpad.com/api/settings). |
External URL reference
| 103 | - **Endpoint:** `POST https://dialpad.com/api/v2/sms` |
External URL reference
| 109 | - **Endpoint:** `POST https://dialpad.com/api/v2/call` |
External URL reference
| 233 | python3 create_sms_webhook.py create --url "https://your-server.com/webhook/dialpad" --direction "all" |