telnyx-10dlc-javascript
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill utilizes the official Telnyx SDK (telnyx@6.74.2), which is a safe and appropriate dependency provided by the vendor.\n- [SAFE]: API key management follows best practices by referencing environment variables (process.env['TELNYX_API_KEY']) instead of hardcoding sensitive credentials.\n- [SAFE]: The implementation includes Ed25519 signature verification for webhooks using client.webhooks.unwrap, which ensures the integrity and authenticity of external data.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes data from API responses and webhooks, creating a potential ingestion surface for indirect instructions.\n
- Ingestion points: Brand and campaign registration response fields (e.g., identityStatus, brandId) and webhook event payloads (e.g., campaignStatusUpdate description).\n
- Boundary markers: None explicitly defined in the prompt text, though the SDK treats values as data parameters.\n
- Capability inventory: Network communication with the Telnyx API via the official SDK.\n
- Sanitization: Employs cryptographic signature verification for incoming webhook events.
Audit Metadata