telnyx-messaging-profiles-javascript
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the official
telnyxpackage from the NPM registry, which is a well-known service for this vendor's infrastructure. - [COMMAND_EXECUTION]: Instructs the user to perform a standard package installation using
npm installto set up the environment. - [INDIRECT_PROMPT_INJECTION]: The skill retrieves content from external AI memory namespaces, which introduces a vulnerability surface for instructions embedded in data to influence the agent.
- Ingestion points: Memory content is ingested via
client.ai.memory.namespaces.profiles.memories.list()andretrieve()methods defined inSKILL.md. - Boundary markers: No delimiters or "ignore instructions" warnings are implemented in the code examples to separate retrieved data from agent instructions.
- Capability inventory: The skill has significant capabilities including creating, updating, and deleting messaging profiles, as well as managing associated phone numbers and short codes.
- Sanitization: The examples do not demonstrate any sanitization or validation of the
textfield retrieved from memory before it is presented to the agent.
Audit Metadata