telnyx-account-access-javascript
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill facilitates interaction with the Telnyx platform using the official
telnyxpackage (version 6.74.2). This is a well-known service provided by the vendor. - [SAFE]: Credentials are managed securely by instructing the user to use the
TELNYX_API_KEYenvironment variable rather than hardcoding sensitive keys. - [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection because it retrieves and displays data from the Telnyx API (e.g., account addresses and SSO configuration) which could potentially contain untrusted content.
- Ingestion points: Data enters the context through API list and retrieve methods such as
client.addresses.list(),client.accessIPAddress.list(), andclient.authenticationProviders.list()inSKILL.md. - Boundary markers: None present in the provided examples.
- Capability inventory: The skill includes capabilities to create, update, and delete account resources via the SDK (e.g.,
client.addresses.create(),client.authenticationProviders.update(),client.integrationSecrets.create()). - Sanitization: No explicit sanitization of the retrieved API data is performed in the code examples.
Audit Metadata