manage-phone-numbers
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill communicates with
api.bolna.aito search, list, and buy phone numbers. This is consistent with the skill's stated purpose and uses the vendor's official API. - [CREDENTIALS_UNSAFE]: Authentication is managed through the
BOLNA_API_KEYenvironment variable. This follows standard security practices for secret management, and no hardcoded credentials or sensitive local file paths are accessed. - [INDIRECT_PROMPT_INJECTION]: The included Python scripts process and display data returned from the Bolna API. This is a standard functional requirement for API wrappers and does not represent a specific security vulnerability in this context.
- [COMMAND_EXECUTION]: The skill includes Python scripts (
search_numbers.py,buy_number.py,list_numbers.py) designed to be executed by the agent. These scripts use the standard Python library (urllib.request) to perform network requests and do not execute arbitrary or dangerous shell commands.
Audit Metadata