telnyx-sip-integrations-go

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external data which could potentially contain malicious instructions intended for the agent.
  • Ingestion points: Untrusted data enters the agent context via API calls that retrieve call transcriptions (RecordingTranscriptions.Get) and media metadata (Media.List).
  • Boundary markers: No specific delimiters or instructions to ignore embedded content are used when processing the text content from these API responses.
  • Capability inventory: The skill allows the agent to perform multiple write and delete operations on the Telnyx platform through the provided SDK methods.
  • Sanitization: The provided code examples do not include explicit sanitization or validation of the text data retrieved from the API.
  • [EXTERNAL_DOWNLOADS]: The skill provides functionality to interact with external media files via URLs.
  • The Media.Upload method allows the agent to ingest media from a specified media_url.
  • The Media.Download method facilitates the retrieval of stored media files.
  • These are core functionalities of the SIP integration service and use the vendor's official SDK.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 04:55 PM