twilio-security-hardening Skill
Secure Twilio applications against common attacks. Covers credential management (API keys vs auth tokens), request validation (webhook signature verification), PCI DSS compliance, HIPAA account requirements, SMS pumping prevention, geo-permissions, and account isolation patterns. Use this skill when developers are buil Published by openai in plugins.
Decision snapshot
Is this a fit?
Security review, Design and media, Includes SKILL.md, Reusable instructions
Compatibility not yet detected.
API key required authentication, Credentials required
Copy skill directory
18 days ago
Access note: API key required.
What is twilio-security-hardening Skill?
Secure Twilio applications against common attacks. Covers credential management (API keys vs auth tokens), request validation (webhook signature verification), PCI DSS compliance, HIPAA account requirements, SMS pumping prevention, geo-permissions, and account isolation patterns. Use this skill when developers are buil Published by openai in plugins. This profile combines repository metadata with install, compatibility, and usage signals so developers can quickly decide whether it fits their agent workflow before opening the source repository.
Automated repository signals based on public metadata such as recency, license, installation evidence, and adoption. These are not a security audit or endorsement. See how SkillIndex evaluates profiles.
Key capabilities
- Includes SKILL.md support
- Reusable instructions support
- Security review
- Design and media
- Security review use cases
- Design and media use cases
Declared skill metadata
- Source file: plugins/twilio-developer-kit/skills/twilio-security-hardening/SKILL.md
These fields retain source and confidence evidence from the indexed SKILL.md.
Compatibility and setup
- Install or run with Copy skill directory
- API key required
Requirements and access
Security and permissions
Review permissions before connecting any MCP server to an agent. Pay special attention to whether it can read local files, write data, call external services, or perform destructive actions.
When to use twilio-security-hardening Skill
- Use it for security review.
- Use it for design and media.
Built with
Editorial notes
Source
- Creator: openai
- Repository: openai/plugins
- Skill file: plugins/twilio-developer-kit/skills/twilio-security-hardening/SKILL.md
What it does
Secure Twilio applications against common attacks. Covers credential management (API keys vs auth tokens), request validation (webhook signature verification), PCI DSS compliance, HIPAA account requirements, SMS pumping prevention, geo-permissions, and account isolation patterns. Use this skill when developers are buil
Skill instructions
Overview Security hardening is an ongoing concern — not a one-time setup. This skill covers account-level security decisions and application-level protection patterns that prevent credential leaks, fraud, and compliance violations. Lifecycle: Choose numbers (twilio-numbers-senders) → Register (twilio-compliance-onboarding) → Follow traffic rules (twilio-compliance-traffic) → Secure everything (this skill) --- Credential Management API Keys vs Auth Tokens | Credential | Scope | Revocable | Use when | |-----------|-------|-----------|----------| | Auth Token | Full account access | Only by rotating (invalidates ALL API keys) | Never in production — use API keys instead | | API Key + Secret | Scoped, revocable individually | Yes — revoke one without affecting others | Production applications, CI/CD, server-side code | | Access Tokens | Short-lived, client-specific | Expire automatically | Client-side SDKs (Voice, Video, Conversations) | Critical gotcha: Rotating your Auth Token invalidate
Verified compatibility and discovery
Frequently asked questions
What is twilio-security-hardening?
twilio-security-hardening is a open-source AI agent skill with Copy skill directory. Secure Twilio applications against common attacks. Covers credential management (API keys vs auth tokens), request validation (webhook signature verification), PCI DSS compliance, HIPAA account.
Who is twilio-security-hardening best for?
twilio-security-hardening is best for reusing agent instructions, scripts, and references, security review workflows, design and media workflows.
How do I install twilio-security-hardening?
Install or run twilio-security-hardening using Copy skill directory. Check twilio-security-hardening for the latest setup command.
Is twilio-security-hardening actively maintained?
twilio-security-hardening may need a closer maintenance check before production use.
Project health auto-fetched from the source repository.
Maintain this resource?
Review this source-backed profile, send a correction with evidence, or link to it from your documentation. Claims verify your relationship to the project; profile facts still require source evidence and editorial review.
