telnyx-messaging-javascript
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses the official Telnyx Node.js SDK via
npm install telnyx@6.74.2. This is a well-known package from a recognized service provider. - [CREDENTIALS_SAFE]: API credentials are correctly managed using environment variables (
process.env['TELNYX_API_KEY']) rather than being hardcoded in the skill instructions or examples. - [INDIRECT_PROMPT_INJECTION]: The skill inherently processes untrusted data as it is designed to send and receive messages.
- Ingestion points: Inbound message text from webhooks (
data.payload.text) and user-supplied text for outbound messages. - Boundary markers: None explicitly defined for message content.
- Capability inventory: The skill's capabilities are strictly limited to Telnyx API operations (messaging, profile management, and metrics). It cannot execute shell commands, perform arbitrary file system operations, or access the network outside of the Telnyx API environment.
- Sanitization: Standard handling of string data for the Telnyx API; no additional sanitization of message content is required for the skill's primary function.
- [COMMAND_EXECUTION]: The code examples involve standard JavaScript SDK method calls. There is no usage of dangerous functions like
eval(),exec(), orchild_processfor arbitrary command execution.
Audit Metadata