ClawHub

Twilio

v1.0.2

Twilio API integration with managed OAuth. SMS, voice calls, phone numbers, and communications. Use this skill when users want to send SMS messages, make voice calls, manage phone numbers, or work with Twilio resources. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway). Requires network access and valid Maton API key.

⭐ 6· 3.8k·7 current·7 all-time
by@byungkyu
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description match the SKILL.md: it proxies Twilio calls via Maton. The only required environment variable (MATON_API_KEY) is consistent with a managed-OAuth gateway; no unrelated binaries, config paths, or credentials are requested.
✓
Instruction Scope
SKILL.md contains explicit HTTP usage examples directed at gateway.maton.ai and ctrl.maton.ai and instructs to set MATON_API_KEY. It does not instruct reading local files, other environment variables, or posting data to unrelated endpoints. OAuth requires opening a returned URL in a browser (expected).
✓
Install Mechanism
Instruction-only skill with no install spec and no code files — nothing is written to disk or fetched during installation, which minimizes supply-chain risk.
ℹ
Credentials
Only MATON_API_KEY is required, which is proportionate for a Maton-managed Twilio gateway. However, that single key is powerful: it can allow Maton to act on your behalf with Twilio connections (list/create/delete connections, proxy API calls). Treat the key as a highly sensitive credential. Minor metadata inconsistency: registry lists no primary credential while SKILL.md clearly requires MATON_API_KEY.
✓
Persistence & Privilege
The skill does not request always:true and is user-invocable; it does not install or persist on the host. The skill can be invoked autonomously (disable-model-invocation is false), which is the platform default and expected for skills — not a red flag by itself.
Assessment
This skill appears coherent for using Twilio via a Maton-managed gateway, but before installing: (1) treat MATON_API_KEY as highly sensitive — it grants Maton access to manage and proxy Twilio resources; confirm the key's scope and permissions and prefer least-privilege tokens. (2) Verify you trust Maton (maton.ai / ctrl.maton.ai / gateway.maton.ai) and understand their privacy/security practices. (3) Use per-connection OAuth where possible rather than a long-lived global key, and rotate/revoke the key when not needed. (4) Note there is no install code (low supply-chain risk) and no unrelated env vars requested. (5) If you need confirmation of what the Maton key can do (create/delete connections, view messages, send SMS), ask the provider or examine Maton account settings before granting the key.

Like a lobster shell, security has layers — review code before you run it.

latestvk97fg0yewmyevbbx03cf0gkfvh80x74a

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🧠 Clawdis
EnvMATON_API_KEY

Comments