telnyx-sip-integrations-java
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides functionality to retrieve and process transcription text from call recordings, which could contain malicious instructions embedded by external callers.
- Ingestion points: Untrusted data enters the context via the
transcription_textfield inRecordingTranscriptionRetrieveResponseas shown inSKILL.md. - Boundary markers: The skill does not demonstrate the use of delimiters or explicit instructions for the agent to ignore potential commands within the transcription text.
- Capability inventory: The skill has the capability to perform network API calls, delete resources (recordings, media, credentials), and modify configurations using the
TelnyxClient. - Sanitization: There is no evidence of sanitization, filtering, or validation performed on the transcription data before it is processed.
- [EXTERNAL_DOWNLOADS]: The skill references the official
com.telnyx.sdk:telnyxJava SDK as a dependency for Maven and Gradle. This is a standard library provided by the vendor for service integration. - [COMMAND_EXECUTION]: The skill provides implementation examples for executing management commands against the Telnyx API, including deleting call recordings, dismissing log messages, and updating storage credentials.
Audit Metadata