telnyx-sip-curl
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous
curlcommand examples to interact with the Telnyx API. These commands are restricted to the official vendor domain (api.telnyx.com) and are standard for an API-integration skill. - [CREDENTIALS_UNSAFE]: The skill uses safe secret management practices. It instructs users to set their API key via an environment variable (
TELNYX_API_KEY) using a placeholder (YOUR_API_KEY_HERE). Example payloads containing passwords use obvious dummy values (e.g., 'my123secure456password789') for demonstration purposes only. - [INDIRECT_PROMPT_INJECTION]: The skill includes shell scripts that process raw JSON responses from the Telnyx API using standard utilities like
sedandtail. While this involves ingesting external data into a shell context, the exposure is limited to official API responses from the vendor's verified infrastructure. - [DATA_EXFILTRATION]: All network operations are directed towards the vendor's own infrastructure (api.telnyx.com). No sensitive local files are accessed or transmitted to third-party domains.
Audit Metadata