telnyx-voice-conferencing-javascript
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Downloads the official
telnyxpackage (version 6.74.2) from the public npm registry. This is a well-known package from a recognized service provider. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data from the Telnyx API, which represents a potential attack surface for indirect prompt injection.
- Ingestion points: Conference names, participant labels, and queue names fetched via
client.conferences.list()andclient.queues.list()inSKILL.md. - Boundary markers: None present in the code examples.
- Capability inventory: Perform network operations (Telnyx API calls) to create, update, or end conferences and modify call queues.
- Sanitization: Not explicitly shown in code snippets; relies on Telnyx SDK and API-side validation.
Audit Metadata