sinch-sms
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Downloads documentation and OpenAPI specifications from trusted first-party domains (developers.sinch.com) as part of its primary function.
- [COMMAND_EXECUTION]: Contains Node.js scripts for interacting with the Sinch API, using secure patterns for authentication and regional configuration.
- [INDIRECT_PROMPT_INJECTION]: The skill correctly identifies inbound SMS content as untrusted data and instructs the agent to treat it as such, preventing accidental execution of commands embedded in messages.
- [CREDENTIALS_UNSAFE]: Explicitly mandates the use of environment variables for API keys and tokens, following secure development best practices.
Audit Metadata