telnyx-texml-javascript
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill correctly references the official
telnyxpackage for installation. This is a standard and expected dependency for the vendor's SDK. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data, creating a potential surface for indirect injection.
- Ingestion points: Untrusted data enters the agent context through call transcriptions and recording resources (found in
SKILL.md). - Boundary markers: Explicit delimiters or warnings are absent in these code snippets.
- Capability inventory: The skill facilitates network operations via the Telnyx API across all documented endpoints.
- Sanitization: No specific sanitization or filtering of external content is shown in the provided examples.
- [SAFE]: The skill demonstrates secure development practices, including the use of environment variables for API keys and public keys, and comprehensive error handling for network and API-specific failures.
Audit Metadata