telnyx-messaging-curl
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill documents an attack surface for indirect prompt injection through the ingestion of external message content.
- Ingestion points: The
inboundMessagewebhook payload described inSKILL.mdincludes thedata.payload.textfield, which contains message body content from external users. - Boundary markers: The skill does not define explicit delimiters or use specific instructions to prevent the agent from interpreting message content as executable commands.
- Capability inventory: The skill utilizes
curlto perform network operations and interact with the Telnyx API, which could be misused if the agent is manipulated. - Sanitization: There are no instructions for sanitizing or validating the incoming message text before the agent processes it.
Audit Metadata