CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

twilio-messaging-webhooks

Receive and respond to inbound messages and track outbound delivery status via Twilio webhooks — across SMS, MMS, WhatsApp, and RCS. Covers webhook request parameters, replying with TwiML, validating webhook signatures for security, and handling status callbacks. Use this skill whenever an agent needs to handle incoming messages on any channel or track outbound message delivery in real time.

67

Quality

84%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

SKILL.md
Quality
Evals
Security

Quality

Content

67%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is a well-structured, largely executable reference for Twilio messaging webhooks with good navigation and a useful CANNOT/errors section. Its main weaknesses are redundant quickstart security callouts, one non-self-contained code snippet, and an implicit rather than enumerated setup workflow.

Suggestions

Consolidate the two overlapping security notes in the Quickstart into a single callout that both flags untrusted Body input and points to the Webhook Security pattern.

Add `import os` (or reference the auth token consistently with the earlier snippets) so the Python signature-validation example runs as-is.

Trim duplicated handler boilerplate by presenting the media-handling and acknowledge patterns as diffs against the base inbound handler rather than repeating full Flask/Express scaffolding.

DimensionReasoningScore

Conciseness

Mostly efficient with dual-language (Python/Node) examples that are appropriate for the domain, but there is noticeable redundancy: the Quickstart carries two overlapping security notes (a 'Security' callout plus a 'Note' repeating that validation is omitted), and the media-handling and acknowledge sections re-state handler boilerplate already shown. This sits between the 3 anchor ('some unnecessary explanation or could be tightened') and 4 ('minor instances of over-explanation'), closer to 3 because the duplicated callouts are a real trim opportunity.

3 / 5

Actionability

Nearly all guidance is executable, copy-paste-ready code in both languages with concrete Console navigation paths, a parameter table, and an error-code fix ('Verify endpoint is reachable (`curl -I` the URL)'). Kept at 4 rather than 5 because the Python signature-validation snippet uses `os.environ["TWILIO_AUTH_TOKEN"]` without importing `os`, so that standalone snippet is not fully executable as written — a minor gap per the 4 anchor.

4 / 5

Workflow Clarity

The flow is clearly organized (prerequisites → quickstart webhook configuration → inbound handling → media → status callbacks → signature validation → CANNOT → errors → next steps) with the key validation checkpoint (X-Twilio-Signature) presented as an explicit pattern and error 11200 paired with a diagnostic fix. Not 5 because the setup sequence is implied by section order rather than explicitly enumerated as a step-by-step workflow with feedback loops, and the Quickstart explicitly omits the validation step.

4 / 5

Progressive Disclosure

No bundle files exist, and the body's cross-references (`twilio-send-message`, `twilio-account-setup`, `twilio-debugging-observability`, etc.) are sibling-skill pointers rather than nested files, so navigation is one level deep and clearly signaled. Sections are well-organized with headers and a Next Steps map. Not 5 because at ~240 lines, some pattern-specific detail (e.g., per-language variants of every pattern) could arguably live in a reference file.

4 / 5

Total

15

/

20

Passed

Description

92%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description: concrete multi-action capability statement, explicit 'use when' trigger, natural channel keywords, and a clearly bounded niche that avoids overlap with sibling Twilio skills. The only minor gap is a few missing colloquial synonyms for the messaging domain.

DimensionReasoningScore

Specificity

The description lists multiple concrete actions — "Receive and respond to inbound messages and track outbound delivery status", "replying with TwiML", "validating webhook signatures for security", and "handling status callbacks" — with comprehensive coverage of the webhook domain. This matches the 5 anchor ('multiple specific concrete actions; comprehensive coverage') and exceeds the 4 anchor's 'minor gaps in coverage'.

5 / 5

Completeness

It explicitly answers both: what ("Covers webhook request parameters, replying with TwiML, validating webhook signatures for security, and handling status callbacks") and when ("Use this skill whenever an agent needs to handle incoming messages on any channel or track outbound message delivery in real time") — a concrete 'Use when' trigger clause matching the 5 anchor. Not 4, because the 'when' clause is explicit and specific rather than improvable.

5 / 5

Trigger Term Quality

Strong natural keywords: "inbound messages", "incoming messages", "delivery status", "webhooks", "SMS", "MMS", "WhatsApp", "RCS", "track outbound message delivery". A few natural user phrasings are missing (e.g., 'reply to texts', 'delivery receipts', 'read receipts'), which keeps it at the 'good coverage, a few natural terms missing' anchor rather than 5's comprehensive synonyms/extensions.

4 / 5

Distinctiveness Conflict Risk

The Twilio webhook niche is distinct with clear triggers (inbound message handling, delivery-status tracking) and is differentiated from sibling skills like twilio-send-message via the inbound/receive framing. Minimal conflict risk; matches the 5 anchor ('clear niche with distinct triggers').

5 / 5

Total

19

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

openai/plugins

Path

plugins/twilio-developer-kit/skills/twilio-messaging-webhooks/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.