telnyx-fax-python
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill interacts with external data sources (Telnyx API and webhooks) that could potentially contain malicious instructions embedded within fax content or metadata.
- Ingestion points: Data enters the agent's context through
client.fax_applications.list(),client.faxes.list(), and incoming webhook payloads as described inSKILL.md. - Boundary markers: There are no explicit delimiters or instructions provided to ensure the agent ignores or sanitizes potential commands embedded in the external data.
- Capability inventory: The skill enables the agent to perform network operations, such as sending faxes via
client.faxes.create, and manage API resources (creating and deleting fax applications). - Sanitization: While the skill correctly implements webhook signature verification using
client.webhooks.unwrap(), there is no evidence of sanitization for the actual content retrieved from the API.
Audit Metadata