telnyx-10dlc-curl
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses
curlto interact exclusively withapi.telnyx.com, which is the official API domain for the vendor (team-telnyx). These network operations are standard for the skill's stated purpose of brand and campaign registration. - [SAFE]: Instructions for handling API keys use standard environment variable patterns with placeholders (
YOUR_API_KEY_HERE), ensuring credentials are not hardcoded or exposed. - [INDIRECT_PROMPT_INJECTION]: The skill handles data ingested from external API responses (e.g., brand and campaign status fields). While this presents a standard attack surface for indirect prompt injection, the data is structured (JSON) and provided by the official service provider infrastructure.
- Ingestion points: API responses from
https://api.telnyx.com/v2/10dlc/*(SKILL.md). - Boundary markers: Not explicitly defined in the provided
curlexamples. - Capability inventory: Network operations via
curlto the vendor's API (SKILL.md). - Sanitization: None explicitly defined in instructions, relying on the agent's default parsing of JSON responses.
Audit Metadata