telnyx-sip-java
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external API responses which could potentially contain malicious instructions if the source data in the Telnyx account is attacker-controlled.
- Ingestion points: Metadata and descriptive fields such as
connection_name,description, andtagsreturned by the Telnyx API (SKILL.md). - Boundary markers: The provided examples do not demonstrate the use of delimiters or specific instructions to the agent to ignore embedded commands within the API response data.
- Capability inventory: The skill provides an interface for the full lifecycle management (creation, retrieval, update, and deletion) of SIP connections, FQDNs, and IP access control lists (SKILL.md).
- Sanitization: No explicit validation or sanitization logic for data ingested from the API is presented in the SDK examples.
Audit Metadata