twilio-video

Fail

Audited by Socket on Mar 7, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

Overall, the skill presents a coherent, purpose-aligned implementation plan for managing Twilio Video in production, including room lifecycles, token minting, recording compositions, and webhook handling. The footprint is proportionate to the described functionality. The primary security concerns are standard for cloud-integrated tooling: curl|bash download patterns in documentation (mitigated by developer discipline), handling and rotation of Twilio credentials, and ensuring secure secret handling and webhook validation. No explicit malicious behavior or data exfiltration is evident. Treat as BENIGN with heightened awareness of credential management and supply-chain risk due to the external script pattern and multi-service integrations; continue to enforce best practices around secret management, verifiable sources, and restricted scopes.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 7, 2026, 05:46 PM
Package URL
pkg:socket/skills-sh/alphaonedev%2Fopenclaw-graph%2Ftwilio-video%2F@ae52d27e5ced43508610af693443f4eea4021f75