telnyx-10dlc-curl

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses curl to interact exclusively with api.telnyx.com, which is the official API domain for the vendor (team-telnyx). These network operations are standard for the skill's stated purpose of brand and campaign registration.
  • [SAFE]: Instructions for handling API keys use standard environment variable patterns with placeholders (YOUR_API_KEY_HERE), ensuring credentials are not hardcoded or exposed.
  • [INDIRECT_PROMPT_INJECTION]: The skill handles data ingested from external API responses (e.g., brand and campaign status fields). While this presents a standard attack surface for indirect prompt injection, the data is structured (JSON) and provided by the official service provider infrastructure.
  • Ingestion points: API responses from https://api.telnyx.com/v2/10dlc/* (SKILL.md).
  • Boundary markers: Not explicitly defined in the provided curl examples.
  • Capability inventory: Network operations via curl to the vendor's API (SKILL.md).
  • Sanitization: None explicitly defined in instructions, relying on the agent's default parsing of JSON responses.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 04:55 PM