telnyx-messaging-hosted-javascript

Pass

Audited by Gen Agent Trust Hub on Oct 28, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides documentation and code samples for interacting with Telnyx messaging services using the official telnyx JavaScript SDK. The implementation follows standard developer patterns for API integration and does not contain any malicious instructions or hidden behaviors.
  • [EXTERNAL_DOWNLOADS]: The skill references the installation of the telnyx package via npm (npm install telnyx@6.74.2). This is the official SDK for a well-known communication provider, and its inclusion is consistent with the skill's stated purpose.
  • [SAFE]: Code samples correctly demonstrate using environment variables (process.env['TELNYX_API_KEY']) to handle sensitive API credentials, which is a recommended security practice to prevent hardcoded secrets.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines methods for handling external message data (e.g., RCS message content and business verification details). As this is the core intended functionality of a messaging SDK, it does not represent an elevated security risk beyond standard API usage.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 28, 2026, 02:19 PM