telnyx-messaging-ruby
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions in 'SKILL.md' direct the user to install the 'telnyx' Ruby gem using 'gem install telnyx'. This is the standard installation procedure for the vendor's library.
- [EXTERNAL_DOWNLOADS]: The skill depends on the 'telnyx' Ruby gem, which is the official software development kit provided by the vendor.
- [PROMPT_INJECTION]: The skill processes inbound communication (SMS, MMS, WhatsApp) and webhook data, which constitutes a surface for potential indirect prompt injection attacks. 1. Ingestion points: Webhook payload processing examples in 'SKILL.md' and the 'inboundMessage' schema definition in 'references/api-details.md'. 2. Boundary markers: The skill does not define specific delimiters or instructions for the agent to ignore potentially malicious embedded commands within the processed message text. 3. Capability inventory: The skill provides tools for sending outbound messages and managing messaging resources, which could be misused if influenced by untrusted input. 4. Sanitization: No explicit sanitization or content validation of external message text is provided in the documentation or logic.
Audit Metadata