telnyx-sip-integrations-javascript
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external API responses, which could potentially contain untrusted content.\n
- Ingestion points: API response fields such as
transcription_textand connection configuration objects (SKILL.md).\n - Boundary markers: The examples do not include delimiters or instructions to ignore potential commands within the data.\n
- Capability inventory: The skill uses the Telnyx SDK to perform network operations and manage telephony resources.\n
- Sanitization: No explicit sanitization or validation of the retrieved API data is demonstrated.\n- [DATA_EXFILTRATION]: The skill includes examples that perform network operations to non-whitelisted domains, specifically the
media_urlparameter in the media upload example.
Audit Metadata