sinch-numbers-api
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for handling inbound callback payloads from webhooks. It proactively mitigates injection risks by instructing the agent to treat callback data as untrusted, verify HMAC-SHA1 signatures before processing, and avoid interpolating callback fields into prompts or executable code.
- [COMMAND_EXECUTION]: A utility script
scripts/get_numbers.cjsis included to facilitate project management. The script performs standard API requests to the official Sinch endpoint (numbers.api.sinch.com) and uses credentials provided through standard environment variables or command-line flags. - [EXTERNAL_DOWNLOADS]: The skill references official Sinch SDKs and documentation. These resources are hosted on the vendor's official and trusted domains (
developers.sinch.com), which is standard practice for developer-oriented tools.
Audit Metadata