CtrlK
BlogDocsLog inGet started
Tessl Logo

twilio-compliance-traffic

Rules you must follow for Twilio messaging and voice traffic. Covers TCPA (consent tiers, quiet hours, DNC), GDPR (EU consent, right to deletion), PCI DSS (payment recording, Pay verb), HIPAA (BAA, PHI), FDCPA (debt collection limits), CAN-SPAM, WhatsApp policies, SHAKEN/STIR, and consent management patterns. Use this skill proactively when developers have working traffic to ensure they follow the rules.

64

Quality

76%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Medium

Suggest reviewing before use

Fix and improve this skill with Tessl

tessl review fix ./plugins/twilio-developer-kit/skills/twilio-compliance-traffic/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

68%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The content is a well-structured, actionable compliance reference with concrete code and thresholds. Its weakest area is workflow clarity, which lacks explicit validation checkpoints for risky send/outbound operations.

Suggestions

Add explicit validation checkpoints before risky operations, e.g., a pre-send checklist verifying recipient time-zone (quiet hours) and opt-out/consent status, plus an attempt-count guard before FDCPA call placement.

Tighten redundancy: consolidate the quiet-hours rule (stated in both TCPA and FDCPA) and avoid restating PCI-Mode irreversibility and 400-day log retention in both their sections and CANNOT.

Make code snippets copy-paste ready by including the necessary imports and context (datetime/timedelta, VoiceResponse, client initialization) so examples are fully executable.

DimensionReasoningScore

Conciseness

The body is efficiently organized with tables and tight bullets and assumes Claude's knowledge of the regulatory regimes, but has minor redundancy (quiet hours repeated across TCPA and FDCPA, CANNOT restating PCI/GDPR points) that could be trimmed, keeping it just below anchor 5.

4 / 5

Actionability

It provides executable Python snippets (recording pause/update, Pay verb, attempt-count logic, consent record dict) and concrete thresholds (8 AM-9 PM, 7 attempts/7 days, 400 days), but some snippets omit imports/context (datetime, timedelta, VoiceResponse), leaving minor gaps versus anchor 5.

4 / 5

Workflow Clarity

A lifecycle sequence (Choose numbers -> Register -> Follow traffic rules -> Secure) and per-regime steps are present, but validation checkpoints for risky operations (e.g., verifying time-zone or attempt-count logic before a send) are missing or implicit, capping it at anchor 3.

3 / 5

Progressive Disclosure

The body is well-organized with clear per-regime section headers, a CANNOT section, and clean Next-Steps navigation to sibling skills, but at ~250 lines all detail is inlined with no one-level-deep bundle references, so it does not reach anchor 5.

4 / 5

Total

15

/

20

Passed

Description

83%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is specific, well-scoped, and clearly distinguishable, with explicit what-and-when guidance. Its main weakness is a trigger clause framed as a proactive meta-instruction rather than concrete user-uttered phrases.

DimensionReasoningScore

Specificity

The description enumerates concrete compliance sub-domains and specific facets ("TCPA (consent tiers, quiet hours, DNC)", "PCI DSS (payment recording, Pay verb)", "HIPAA (BAA, PHI)"), giving comprehensive concrete coverage matching the anchor-5 example.

5 / 5

Completeness

Both what ("Rules you must follow for Twilio messaging and voice traffic" plus enumerated coverage) and when ("Use this skill proactively when developers have working traffic") are explicit, but the when is a meta-trigger rather than a concrete user-said phrase, so it does not reach anchor 5.

4 / 5

Trigger Term Quality

Strong domain keywords are present (Twilio messaging and voice traffic, TCPA, GDPR, consent, quiet hours, DNC, debt collection) but the phrasing leans on regulatory acronyms rather than colloquial user phrases, and lacks synonyms/file extensions, placing it just below anchor 5.

4 / 5

Distinctiveness Conflict Risk

The skill occupies a clear niche (ongoing Twilio traffic compliance) and scopes itself against sibling skills (onboarding, numbers, security), giving distinct triggers with minimal conflict risk.

5 / 5

Total

18

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
openai/plugins
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.