telnyx-video-java
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The code samples utilize the official com.telnyx.sdk package (version 6.84.0) and follow best practices for secret management by loading clients from environment variables.
- [CREDENTIALS_UNSAFE]: An example JWT refresh token is provided in the documentation code snippets. Analysis of the JWT structure and payload indicates the token ceased being valid in May 2020. As an expired token provided by the official vendor (team-telnyx) in generated documentation, this does not represent a live credential leak.
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates processing of external data which represents a potential injection surface.
- Ingestion points: Participant context strings (retrieved via GET /room_participants) and unique room names (retrieved via GET /rooms).
- Boundary markers: Absence of explicit delimiters or instructions to ignore embedded commands in the processed strings within the code samples.
- Capability inventory: Support for critical operations including ending room sessions, kicking participants, and performing bulk deletion of recordings.
- Sanitization: No evidence of input sanitization or validation logic in the provided implementation examples.
Audit Metadata