telnyx-porting-out-python
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation includes instructions to install the official Telnyx Python SDK.
- Evidence:
SKILL.mdrecommends runningpip install telnyxto set up the environment. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from the Telnyx API that could contain untrusted content, potentially influencing the agent's behavior.
- Ingestion points: Data is fetched in
SKILL.mdusing methods likeclient.portouts.list(),client.portouts.comments.list(), andclient.portouts.events.list(), which return string fields such asbody(for comments),reason, andauthorized_name. - Boundary markers: The provided instructions do not define specific delimiters or guidelines for the agent to distinguish between its core instructions and the data returned by the API.
- Capability inventory: The skill provides methods for modifying external data, such as
client.portouts.update_status()andclient.portouts.comments.create()inSKILL.md. - Sanitization: There is no evidence of string sanitization, filtering, or content validation for the data retrieved from the API within the documented examples.
Audit Metadata