telnyx-fax-javascript
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data which could potentially contain malicious instructions targeting the agent context.
- Ingestion points: The
media_urlparameter in theclient.faxes.createmethod allows the skill to retrieve external files. Additionally, the webhook handler processes incoming payloads from external sources. - Boundary markers: The documentation includes a section on Webhook Verification, which uses Ed25519 signatures to ensure data integrity, though it does not explicitly delimit the contents of the fax media itself.
- Capability inventory: The skill is capable of performing network operations via the Telnyx SDK to send and manage faxes.
- Sanitization: The skill recommends using
client.webhooks.unwrap()to verify signatures, which is a strong best practice for validating the source of external data.
Audit Metadata