sinch-numbers-api
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses verified vendor domains (numbers.api.sinch.com, developers.sinch.com) for all network operations and documentation references.
- [SAFE]: Sensitive information, including API keys and secrets, is handled through environment variables (e.g., SINCH_KEY_SECRET), which is the recommended method for preventing credential exposure.
- [SAFE]: The instructions include a specific security section addressing the risks of processing external data (callbacks), mandating HMAC-SHA1 signature verification and warning against interpolating untrusted fields into prompts or executable code.
Audit Metadata