telnyx-numbers-java

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: No malicious patterns, obfuscation, or high-risk operations were detected in the skill instructions or referenced API details. The skill uses official Telnyx Java SDK dependencies (com.telnyx.sdk:telnyx).
  • [INDIRECT_PROMPT_INJECTION]: The skill includes functionality to ingest and process data from the Telnyx API, such as phone number details and user comments, which represents a potential attack surface for indirect prompt injection.
  • Ingestion points: SKILL.md (API responses from availablePhoneNumbers().list(), comments().list(), and numberOrders().retrieve()).
  • Boundary markers: None specified in the SDK usage examples provided in SKILL.md.
  • Capability inventory: SKILL.md (Phone number order creation, reservation management, and comment creation).
  • Sanitization: No explicit sanitization logic is demonstrated in the instructional code snippets.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 04:55 PM