telnyx-account-reports-ruby
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the
telnyxRuby gem, which is the official SDK provided by the vendor. - [COMMAND_EXECUTION]: The skill demonstrates the use of the
gem installcommand to set up the development environment. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from the Telnyx API, including call events, billing reports, and usage records. This represents a potential surface for indirect prompt injection if the retrieved data contains malicious instructions.
- Ingestion points: SKILL.md documents multiple methods such as
client.call_events.listandclient.reports.mdr_usage_reports.listthat retrieve external data into the agent's context. - Boundary markers: The instructions do not define specific delimiters or isolation rules to separate the external API data from the agent's system instructions.
- Capability inventory: The skill provides capabilities to read, create, and delete reports and records via the Telnyx SDK.
- Sanitization: The provided Ruby examples do not include logic for sanitizing or validating the data returned from the API before use.
Audit Metadata