telnyx-sip-integrations-ruby

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The documentation instructs the user to install the official Telnyx Ruby library from the public RubyGems registry.
  • Evidence: gem install telnyx command in SKILL.md.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external telephony events and recordings which could contain malicious instructions designed to influence the agent's behavior.
  • Ingestion points: recording_transcriptions returns transcription_text from the Telnyx API. media.upload takes a media_url to ingest remote audio/media content.
  • Boundary markers: The code examples do not demonstrate the use of delimiters or clear instructions to the model to ignore potential commands within the ingested data.
  • Capability inventory: The skill is limited to performing API operations through the Telnyx SDK (managing connections, recordings, and media). It does not provide capabilities for arbitrary command execution or local file system access beyond the SDK's scope.
  • Sanitization: No explicit sanitization or filtering of the transcription text or the contents of the media URL is shown in the provided implementation examples.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 04:56 PM