twilio-security-hardening Skill
Secure Twilio applications against common attacks. Covers credential management (API keys vs auth tokens), request validation (webhook signature verification), PCI DSS compliance, HIPAA account requirements, SMS pumping prevention, geo-permissions, and account isolation patterns. Use this skill when developers are buil Published by openai in plugins.
What is twilio-security-hardening Skill?
Secure Twilio applications against common attacks. Covers credential management (API keys vs auth tokens), request validation (webhook signature verification), PCI DSS compliance, HIPAA account requirements, SMS pumping prevention, geo-permissions, and account isolation patterns. Use this skill when developers are buil Published by openai in plugins. This profile combines repository metadata with install, compatibility, and usage signals so developers can quickly decide whether it fits their agent workflow before opening the source repository.
Automated repository signals based on public metadata such as recency, license, installation evidence, and adoption. These are not a security audit or endorsement.
Key capabilities
- Includes SKILL.md support
- Reusable instructions support
- Security review
- Design and media
- Security review use cases
- Design and media use cases
Technical details
- Install or run with Copy skill directory
When to use twilio-security-hardening Skill
- Use it for security review.
- Use it for design and media.
Built with
Editorial notes
Source
- Creator: openai
- Repository: openai/plugins
- Skill file: plugins/twilio-developer-kit/skills/twilio-security-hardening/SKILL.md
What it does
Secure Twilio applications against common attacks. Covers credential management (API keys vs auth tokens), request validation (webhook signature verification), PCI DSS compliance, HIPAA account requirements, SMS pumping prevention, geo-permissions, and account isolation patterns. Use this skill when developers are buil
Skill instructions
Overview Security hardening is an ongoing concern — not a one-time setup. This skill covers account-level security decisions and application-level protection patterns that prevent credential leaks, fraud, and compliance violations. Lifecycle: Choose numbers (twilio-numbers-senders) → Register (twilio-compliance-onboarding) → Follow traffic rules (twilio-compliance-traffic) → Secure everything (this skill) --- Credential Management API Keys vs Auth Tokens | Credential | Scope | Revocable | Use when | |-----------|-------|-----------|----------| | Auth Token | Full account access | Only by rotating (invalidates ALL API keys) | Never in production — use API keys instead | | API Key + Secret | Scoped, revocable individually | Yes — revoke one without affecting others | Production applications, CI/CD, server-side code | | Access Tokens | Short-lived, client-specific | Expire automatically | Client-side SDKs (Voice, Video, Conversations) | Critical gotcha: Rotating your Auth Token invalidate
Explore related resources
Frequently asked questions
What is twilio-security-hardening?
twilio-security-hardening is a open-source AI agent skill with Copy skill directory. Secure Twilio applications against common attacks. Covers credential management (API keys vs auth tokens), request validation (webhook signature verification), PCI DSS compliance, HIPAA account.
Who is twilio-security-hardening best for?
twilio-security-hardening is best for reusing agent instructions, scripts, and references, security review workflows, design and media workflows.
How do I install twilio-security-hardening?
Install or run twilio-security-hardening using Copy skill directory. Check twilio-security-hardening for the latest setup command.
Is twilio-security-hardening actively maintained?
twilio-security-hardening may need a closer maintenance check before production use.
Auto-fetched from GitHub.
