telnyx-storage-curl
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides multiple bash command templates using curl to manage cloud storage. These commands are intended to be executed by the agent to perform API operations.- [INDIRECT_PROMPT_INJECTION]: The command templates use shell variable interpolation for parameters such as {bucketName} and {objectName} without providing sanitization or escaping logic. This creates a vulnerability surface where a malicious user could provide input containing shell metacharacters to execute unauthorized commands.
- Ingestion points: User-provided values for bucketName and objectName placeholders in SKILL.md.
- Boundary markers: None.
- Capability inventory: Execution of curl commands with the ability to read local files (e.g., private keys) via the -F flag.
- Sanitization: Absent; the templates rely on the agent or user to ensure input safety.
Audit Metadata