telnyx-numbers-config-curl
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides documentation and curl examples for interacting with official Telnyx API endpoints (api.telnyx.com), which are recognized as safe vendor resources.
- [CREDENTIALS_UNSAFE]: The skill uses environment variables for authentication and provides 'YOUR_API_KEY_HERE' placeholders, which is a secure practice for managing sensitive keys.
- [INDIRECT_PROMPT_INJECTION]: The skill accepts data such as phone numbers and IDs into shell command templates, creating a surface for indirect prompt injection.
- Ingestion points: Parameters in curl commands within SKILL.md.
- Boundary markers: None present in code examples.
- Capability inventory: Network interaction via curl.
- Sanitization: Absent; input is expected to be validated by the agent or user.
Audit Metadata