telnyx-numbers-java
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or high-risk operations were detected in the skill instructions or referenced API details. The skill uses official Telnyx Java SDK dependencies (com.telnyx.sdk:telnyx).
- [INDIRECT_PROMPT_INJECTION]: The skill includes functionality to ingest and process data from the Telnyx API, such as phone number details and user comments, which represents a potential attack surface for indirect prompt injection.
- Ingestion points:
SKILL.md(API responses fromavailablePhoneNumbers().list(),comments().list(), andnumberOrders().retrieve()). - Boundary markers: None specified in the SDK usage examples provided in
SKILL.md. - Capability inventory:
SKILL.md(Phone number order creation, reservation management, and comment creation). - Sanitization: No explicit sanitization logic is demonstrated in the instructional code snippets.
Audit Metadata