Twilio WhatsApp Channel

The Twilio WhatsApp channel mostly matches its stated purpose, but review is recommended because media, credentials, and inbound sender controls have boundary issues that could expose data or allow unintended users to interact with the agent.

Before installing, pin the package version, configure `dmPolicy` as `allowlist` with explicit phone numbers, verify unlisted numbers are blocked, and avoid letting the agent send arbitrary local file paths as media. Treat the Twilio auth token as highly sensitive and prefer a version that bounds media redirects and file staging paths.