Back to plugin

Security audit

Twilio WhatsApp Channel

Security checks for vulnerabilities and agentic risk

Overview

This is a coherent Twilio WhatsApp channel plugin with expected network, credential, webhook, and media-file behavior for its stated purpose.

Install only if you are comfortable giving this community plugin Twilio credentials and exposing an HTTPS webhook to your OpenClaw gateway. Prefer allowlist mode, restrict allowed phone numbers, treat logs as sensitive when diagnostics are enabled, and remember that WhatsApp media may be stored persistently in the OpenClaw state directory.

Static analysis

No suspicious patterns detected.