agentphone
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources (SMS, WhatsApp, iMessage, and voice call transcripts) which could contain embedded instructions.
- Ingestion points: Data enters through endpoints such as /v1/messages, /v1/conversations, and /v1/calls/transcript as documented in references/rest-api.md and references/mcp-tools.md.
- Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded commands in the processed text.
- Capability inventory: The agent has permissions to send messages, place calls, and manage account resources as detailed in references/rest-api.md and SKILL.md.
- Sanitization: There is no evidence of content sanitization or validation for incoming messages or transcripts before the agent processes them.
Audit Metadata