telnyx-messaging-profiles-javascript

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches the official telnyx package from the NPM registry, which is a well-known service for this vendor's infrastructure.
  • [COMMAND_EXECUTION]: Instructs the user to perform a standard package installation using npm install to set up the environment.
  • [INDIRECT_PROMPT_INJECTION]: The skill retrieves content from external AI memory namespaces, which introduces a vulnerability surface for instructions embedded in data to influence the agent.
  • Ingestion points: Memory content is ingested via client.ai.memory.namespaces.profiles.memories.list() and retrieve() methods defined in SKILL.md.
  • Boundary markers: No delimiters or "ignore instructions" warnings are implemented in the code examples to separate retrieved data from agent instructions.
  • Capability inventory: The skill has significant capabilities including creating, updating, and deleting messaging profiles, as well as managing associated phone numbers and short codes.
  • Sanitization: The examples do not demonstrate any sanitization or validation of the text field retrieved from memory before it is presented to the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 09:48 PM