telecom-security
Evaluates telecom infrastructure security, identifying vulnerabilities in VoIP, SMS authentication, and telephony applications.
Install this skill
or
84/100
Security score
The telecom-security skill was audited on Mar 1, 2026 and we found 4 security issues across 1 threat category. Review the findings below before installing.
Categories Tested
Security Issues
medium line 79
Webhook reference - potential data exfiltration
SourceSKILL.md
| 79 | - **Webhook spoofing**: attacker sends fake status callbacks to application endpoints |
medium line 111
Webhook reference - potential data exfiltration
SourceSKILL.md
| 111 | - Webhook endpoints validate request signatures (e.g., Twilio `X-Twilio-Signature`)? |
low line 142
Webhook reference - potential data exfiltration
SourceSKILL.md
| 142 | # FINDING: Telephony webhook without signature verification |
medium line 167
Webhook reference - potential data exfiltration
SourceSKILL.md
| 167 | | Webhook spoofing | Validate HMAC signatures, check timestamps, reject replays >5 min | |
Scanned on Mar 1, 2026
View Security Dashboard