telnyx-voice-conferencing-go
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data via webhook events which could potentially contain malicious instructions.
- Ingestion points: The
handleWebhookfunction inSKILL.mdingests untrusted request bodies from external webhook sources. - Boundary markers: The documentation explicitly provides code examples for Ed25519 signature verification using
client.Webhooks.Unwrapto validate the authenticity of incoming data. - Capability inventory: The skill demonstrates capabilities for voice control, including text-to-speech (
Speak), call recording (RecordStart), and conference management (Join,EndConference) via the Telnyx API. - Sanitization: Employs cryptographic integrity checks (Ed25519) to verify payloads before they are processed by the agent or application logic.
- [EXTERNAL_DOWNLOADS]: The skill includes instructions to fetch the official Telnyx Go SDK from the vendor's repository on GitHub.
Audit Metadata