twilio-debugging-observability

Facilitates debugging Twilio integrations and sets up observability for production environments, enhancing error tracking and resolution.

Install this skill

or

0/100

Security score

The twilio-debugging-observability skill was audited on May 26, 2026 and we found 54 security issues across 4 threat categories, including 3 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

medium line 50

Template literal with variable interpolation in command context

SourceSKILL.md

50	console.log(`${a.dateCreated}: [${a.errorCode}] ${a.alertText}`);

medium line 149

Template literal with variable interpolation in command context

SourceSKILL.md

149	`https://${req.headers.host}${req.originalUrl}`,

medium line 156

Template literal with variable interpolation in command context

SourceSKILL.md

156	console.log(`[${req.body.Level}] Error ${error_code} on ${resource_sid}: ${msg}`);

medium line 195

Template literal with variable interpolation in command context

SourceSKILL.md

195	console.log(`${alert.dateCreated} [${alert.errorCode}]`);

medium line 197

Template literal with variable interpolation in command context

SourceSKILL.md

197	console.log(` Request URL: ${detail.requestUrl}`);

medium line 198

Template literal with variable interpolation in command context

SourceSKILL.md

198	console.log(` Response body: ${detail.responseBody}`);

medium line 371

Template literal with variable interpolation in command context

SourceSKILL.md

371	console.log(`Status: ${message.status}, Error: ${message.errorCode}`);

medium line 374

Template literal with variable interpolation in command context

SourceSKILL.md

374	console.log(`Status: ${call.status}, Duration: ${call.duration}`);

high line 315

Curl to non-GitHub URL

SourceSKILL.md

315	\| Error 11200 in Debugger \| Webhook URL returned non-200 / unreachable \| Verify endpoint is live: `curl -I https://yourapp.com/sms` \|

high line 316

Curl to non-GitHub URL

SourceSKILL.md

316	\| Error 11205 \| HTTP connection failure (port closed, refused, firewall) \| Verify server is running and port is open: `curl -I https://yourapp.com/sms` \|

medium line 325

Curl to non-GitHub URL

SourceSKILL.md

325	curl -X POST https://yourapp.com/sms \

low line 72

Webhook reference - potential data exfiltration

SourceSKILL.md

72	4. Check the Console Debugger for webhook/TwiML errors

low line 75

Webhook reference - potential data exfiltration

SourceSKILL.md

75	5. Check your webhook endpoint

medium line 90

Webhook reference - potential data exfiltration

SourceSKILL.md

90	Rule of thumb: If status callbacks show `delivered` but the user says they didn't receive it, the issue is on the carrier/device side (not Twilio). If the Console Debugger shows no errors at all,

medium line 99

Webhook reference - potential data exfiltration

SourceSKILL.md

99	- The full HTTP request and response for the associated webhook

medium line 101

Webhook reference - potential data exfiltration

SourceSKILL.md

101	Configure a Debugger webhook for real-time alerting:

medium line 105

Webhook reference - potential data exfiltration

SourceSKILL.md

105	Debugger webhook POST parameters:

medium line 113

Webhook reference - potential data exfiltration

SourceSKILL.md

113	\| `Payload` \| JSON: `resource_sid`, `error_code`, `more_info`, `webhook` (full request/response) \|

medium line 115

Webhook reference - potential data exfiltration

SourceSKILL.md

115	Python (Flask) -- debugger webhook handler

medium line 138

Webhook reference - potential data exfiltration

SourceSKILL.md

138	Node.js (Express) -- debugger webhook handler

medium line 220

Webhook reference - potential data exfiltration

SourceSKILL.md

220	- Audit who changed a phone number's webhook URL

medium line 229

Webhook reference - potential data exfiltration

SourceSKILL.md

229	Python -- set up error log streaming to a webhook

low line 236

Webhook reference - potential data exfiltration

SourceSKILL.md

236	# Step 1: Create a webhook sink

low line 242

Webhook reference - potential data exfiltration

SourceSKILL.md

242	"SinkType": "webhook",

medium line 261

Webhook reference - potential data exfiltration

SourceSKILL.md

261	Sink types: `webhook`, `kinesis`, `segment`

medium line 307

Webhook reference - potential data exfiltration

SourceSKILL.md

307	### 7. Debugging Webhooks

medium line 309

Webhook reference - potential data exfiltration

SourceSKILL.md

309	When Twilio can't reach your webhook or receives an error, the problem is often in your infrastructure.

medium line 315

Webhook reference - potential data exfiltration

SourceSKILL.md

315	\| Error 11200 in Debugger \| Webhook URL returned non-200 / unreachable \| Verify endpoint is live: `curl -I https://yourapp.com/sms` \|

medium line 319

Webhook reference - potential data exfiltration

SourceSKILL.md

319	\| Webhook works locally but not deployed \| Tunnel expired or firewall \| Use `curl` from an external host to test \|

medium line 322

Webhook reference - potential data exfiltration

SourceSKILL.md

322	Test webhooks manually:

low line 324

Webhook reference - potential data exfiltration

SourceSKILL.md

324	# Simulate an inbound SMS webhook

medium line 332

Webhook reference - potential data exfiltration

SourceSKILL.md

332	Browser testing: Visit your webhook URL in Firefox -- it highlights XML errors in the response.

medium line 338

Webhook reference - potential data exfiltration

SourceSKILL.md

338	\| 11200 \| HTTP retrieval failure \| Twilio cannot reach your webhook URL \| Check URL, DNS, firewall, SSL cert \|

medium line 339

Webhook reference - potential data exfiltration

SourceSKILL.md

339	\| 11205 \| HTTP connection failure \| Webhook endpoint refused connection \| Verify server is running and port is open \|

medium line 398

Webhook reference - potential data exfiltration

SourceSKILL.md

398	\| Webhook errors \| Debugger webhook or Event Streams (`com.twilio.error-logs.error.logged`) \| Any error \|

medium line 401

Webhook reference - potential data exfiltration

SourceSKILL.md

401	\| Webhook response time \| Your APM (DataDog, New Relic) \| p95 > 5 seconds \|

medium line 421

Webhook reference - potential data exfiltration

SourceSKILL.md

421	- Webhook architecture: `twilio-webhook-architecture`

medium line 422

Webhook reference - potential data exfiltration

SourceSKILL.md

422	- Scale webhook handling: `twilio-reliability-patterns`

high line 320

Ngrok tunnel reference

SourceSKILL.md

320	\| Intermittent failures \| ngrok session expired / recycled \| Deploy to a stable host for anything beyond quick tests \|

low line 46

Access to .env file

SourceSKILL.md

46	const client = twilio(process.env.TWILIO_ACCOUNT_SID, process.env.TWILIO_AUTH_TOKEN);

low line 147

Access to .env file

SourceSKILL.md

147	process.env.TWILIO_AUTH_TOKEN,

low line 94

External URL reference

SourceSKILL.md

94	The [Console Debugger](https://console.twilio.com/us1/monitor/logs/debugger) shows errors and warnings for your account in real time.

low line 149

External URL reference

SourceSKILL.md

149	`https://${req.headers.host}${req.originalUrl}`,

low line 238

External URL reference

SourceSKILL.md

238	"https://events.twilio.com/v1/Sinks",

low line 243

External URL reference

SourceSKILL.md

243	"SinkConfiguration": '{"destination": "https://yourapp.com/twilio-errors", "method": "POST"}'

low line 249

External URL reference

SourceSKILL.md

249	"https://events.twilio.com/v1/Subscriptions",

low line 281

External URL reference

SourceSKILL.md

281	status_callback="https://yourapp.com/msg-status"

low line 289

External URL reference

SourceSKILL.md

289	url="https://yourapp.com/voice",

low line 290

External URL reference

SourceSKILL.md

290	status_callback="https://yourapp.com/call-status",

low line 300

External URL reference

SourceSKILL.md

300	recording_status_callback="https://yourapp.com/recording-status",

low line 315

External URL reference

SourceSKILL.md

315	\| Error 11200 in Debugger \| Webhook URL returned non-200 / unreachable \| Verify endpoint is live: `curl -I https://yourapp.com/sms` \|

low line 316

External URL reference

SourceSKILL.md

316	\| Error 11205 \| HTTP connection failure (port closed, refused, firewall) \| Verify server is running and port is open: `curl -I https://yourapp.com/sms` \|

low line 325

External URL reference

SourceSKILL.md

325	curl -X POST https://yourapp.com/sms \

low line 351

External URL reference

SourceSKILL.md

351	Full error reference: https://www.twilio.com/docs/api/errors

Scanned on May 26, 2026

View Security Dashboard

Installation guide →

Rate this skill

Categorymarketing

UpdatedJune 10, 2026

openclaw api growth-marketer customer-success-manager technical-support sales-engineer product-manager twilio marketing sales support product