telnyx-texml-java
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill uses the official Telnyx Java SDK (com.telnyx.sdk:telnyx) to interact with its telephony services. This is a standard and expected integration for a communication platform.
- [SAFE]: Authentication is handled using
TelnyxOkHttpClient.fromEnv(), which correctly avoids hardcoding API keys by retrieving them from environment variables. - [INDIRECT_PROMPT_INJECTION]: The
initiateAiCallfunction acceptsAIAssistantDynamicVariables, which serves as an ingestion point for untrusted data. There are no explicit boundary markers or instructions to ignore embedded commands within the provided examples. The skill has high-impact capabilities, including initiating outbound calls and managing recordings, and does not demonstrate sanitization of these dynamic inputs.
Audit Metadata