CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

twilio-webhook-architecture

Design, secure, and operate Twilio webhook endpoints. Covers inbound event handling, status callbacks, signature validation, connection overrides for retry and timeout tuning, local development tunneling, and production hardening. Use this skill whenever an agent needs to receive HTTP callbacks from Twilio for any product -- messaging, voice, verify, or event streams.

68

Quality

86%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

78%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A dense, highly actionable reference: executable dual-language code, precise configuration tables, and valuable hard constraints (CANNOT section). Its weaknesses are inlined reference material that should live in separate files and repeated validator snippets that inflate token cost, plus a missing explicit verify-the-webhook checkpoint.

Suggestions

Move the four parameter tables (Inbound SMS, Inbound Voice Call, Message Status Callback, Debugger Event) into a references/webhook-parameters.md file and link to it from SKILL.md, keeping only the most common fields inline.

Show the signature-validation snippet once in the 'Signature Validation' section and reference it from the Quickstart and status-callback examples instead of repeating the validator code three times.

Add an explicit verification step after the Quickstart (e.g., send a test SMS via the API or the Console 'test' action and confirm the validated handler returns TwiML), with a pointer to twilio-debugging-observability for failure diagnosis.

DimensionReasoningScore

Conciseness

Prose is minimal and mostly tables plus copy-paste code — every token nearly earns its place. However, the signature-validation snippet is repeated three times (Quickstart, Key Pattern 2, and inside both status handlers), which is trimmable redundancy. Matches 4 (efficient with minor instances that could be trimmed); not 5 due to the duplicated validator code.

4 / 5

Actionability

Fully executable, copy-paste-ready Python and Node examples for every pattern, exact Console navigation ("Phone Numbers > Active Numbers > (your number) > Messaging > 'A Message Comes In'"), concrete CLI commands, and specific override fragments like "https://yourapp.com/sms#rc=3&rp=ct,rt". Matches the 5 anchor; not 4 because the code covers the common cases completely in both languages.

5 / 5

Workflow Clarity

Clear sequence (Prerequisites → Quickstart → patterns → parameter reference → CANNOT → Next Steps) and signature validation acts as a checkpoint before acting on payloads. But there is no explicit 'verify your webhook works' step or error-recovery loop (debugging is deferred to twilio-debugging-observability). Matches 4 (clear sequence, most checkpoints present, minor validation gaps); not 5 for the missing test/feedback checkpoint.

4 / 5

Progressive Disclosure

Sections are well-organized and navigable, but the entire 415-line skill is inlined in SKILL.md with no bundle files at all — the four parameter tables (inbound SMS, voice, message status, debugger events) and per-product details clearly belong in separate reference files, and the only pointers are to sibling skills, not to this bundle's own deeper material. Matches anchor 3 (content that should be separate is inline); not 4 because no reference-file mechanism exists; not 2 because structure and section headers make it easy to navigate.

3 / 5

Total

16

/

20

Passed

Description

88%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description: concrete third-person action list, explicit 'Use when' trigger clause with product scoping, and natural keywords. The only gaps are a few missing trigger synonyms (TwiML, callback URL, tunnel) and mild overlap risk with product-specific sibling Twilio skills.

DimensionReasoningScore

Specificity

"Design, secure, and operate Twilio webhook endpoints" plus six enumerated concrete actions ("inbound event handling, status callbacks, signature validation, connection overrides for retry and timeout tuning, local development tunneling, and production hardening") gives comprehensive, third-person coverage with no padding. Not 4: the action list is comprehensive rather than having minor gaps.

5 / 5

Completeness

Explicitly answers what ("Design, secure, and operate Twilio webhook endpoints. Covers inbound event handling, status callbacks, signature validation...") and when ("Use this skill whenever an agent needs to receive HTTP callbacks from Twilio for any product"). Matches the 5 anchor: both what and when are explicit with concrete trigger phrases. Not 4 because the when-clause is fully explicit, not weakly implied.

5 / 5

Trigger Term Quality

Natural terms include "Twilio webhook", "webhook endpoints", "HTTP callbacks", "status callbacks", and product names (messaging, voice, verify, event streams). A few natural phrasings users would say are missing, such as "TwiML", "callback URL", or "tunnel"/"ngrok". Not 5: synonyms and common variations are not fully covered; not 3 because keyword coverage is good, not partial.

4 / 5

Distinctiveness Conflict Risk

"Twilio webhook endpoints" and the product list carve a clear niche, but the any-product framing ("messaging, voice, verify, or event streams") overlaps with the sibling Twilio skills the body itself points to (twilio-messaging-webhooks, twilio-voice-twiml). Mostly distinct with minor overlap risk — matches 4; not 5 because triggering on a voice or messaging webhook task could route to a sibling skill instead.

4 / 5

Total

18

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

openai/plugins

Path

plugins/twilio-developer-kit/skills/twilio-webhook-architecture/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.