Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward setup guide, but it normalizes sharing powerful Twilio credentials with ElevenLabs and placing outbound AI calls without enough consent, revocation, or cost guidance.
Review this carefully before installing or following it. Use a dedicated Twilio subaccount or restricted credentials if possible, understand that the Twilio token is shared with ElevenLabs, rotate or revoke credentials after testing, and only call recipients who have explicitly agreed to receive AI calls. Check applicable call recording, robocall, telemarketing, privacy, and billing rules for your region before production use.
The skill promotes outbound AI phone calls and real-time conversations without any warning about recipient consent, call recording/privacy obligations, carrier rules, or unexpected telephony charges. That omission can lead users to deploy calling workflows that violate law or policy, expose personal data, or generate unauthorized costs.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
curl -X POST "https://api.elevenlabs.io/v1/convai/agents/create" \
-H "xi-api-key: $ELEVENLABS_API_KEY" \
-H "Content-Type: application/json" \
-d '{
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
curl -X POST "https://api.elevenlabs.io/v1/convai/agents/create" \
-H "xi-api-key: $ELEVENLABS_API_KEY" \
-H "Content-Type: application/json" \
-d '{
The guide explicitly instructs users to send their Twilio Account SID and Auth Token to ElevenLabs to link a phone number, but it does not warn that this shares highly privileged telecom credentials with a separate third party. If those credentials are mishandled, over-scoped, or later compromised, an attacker or service misuse could place calls, access account resources, and incur charges on the user's Twilio account.
This request transmits Twilio SID and Auth Token to ElevenLabs, creating a direct third-party secret-sharing path for credentials that can control telephony resources and billing. The danger is elevated because the example normalizes sending those secrets without explaining scope, revocation, or the consequences of compromise.
curl -X POST "https://api.elevenlabs.io/v1/convai/phone-numbers/create" \
-H "xi-api-key: $ELEVENLABS_API_KEY" \
-H "Content-Type: application/json" \
-d '{
The outbound-call example triggers real phone calls to a recipient number without embedding any safety guidance around consent, identity disclosure, rate limits, or cost exposure. In this skill's context, initiating AI calls is the core action, so the absence of safeguards makes misuse and accidental policy violations more likely.
curl -X POST "https://api.elevenlabs.io/v1/convai/twilio/outbound-call" \
-H "xi-api-key: $ELEVENLABS_API_KEY" \
-H "Content-Type: application/json" \
-d '{
No suspicious patterns detected.