telnyx-account-javascript
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill documentation provides legitimate code examples for interacting with the Telnyx API using the official SDK.
- [SAFE]: The skill correctly handles credentials by referencing environment variables (process.env['TELNYX_API_KEY']) rather than hardcoding sensitive keys, aligning with standard security best practices.
- [EXTERNAL_DOWNLOADS]: The skill identifies the telnyx package from the NPM registry as a dependency for its operations.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external API responses (e.g., client.auditEvents.list() in SKILL.md). 1. Ingestion points: Data enters the context via SDK list and retrieve calls. 2. Boundary markers: No explicit delimiters are used in the code examples. 3. Capability inventory: The provided snippets are limited to console logging and iterator logic. 4. Sanitization: The examples do not demonstrate validation of the returned API data.
Audit Metadata