telnyx-messaging-ruby
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill follows established security practices for SDK integrations. It uses environment variables for sensitive credentials (ENV['TELNYX_API_KEY']) and provides clear instructions for verifying webhook authenticity using Ed25519 signatures via the client.webhooks.unwrap method.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data through inbound message webhooks (message.received). This is an inherent part of the messaging service's functionality. The skill provides the necessary tools for authentication (signature verification) and documents the data ingestion points, although the provided examples do not explicitly detail secondary sanitization of message content for LLM safety.
Audit Metadata