telnyx-voice-conferencing-python
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
telnyxPython package. - Evidence: The instructions include
pip install telnyxto install the official SDK. - Context: The package is the official SDK provided by the vendor, team-telnyx, and is a standard requirement for the skill's functionality.
- [INDIRECT_PROMPT_INJECTION]: The skill handles untrusted data as parameters for API calls, which constitutes a potential attack surface for indirect prompt injection.
- Ingestion points: Untrusted data enters the context via parameters such as
queue_nameinclient.queues.create,audio_urlinclient.conferences.actions.play, andpayloadinclient.conferences.actions.speak(SKILL.md). - Boundary markers: No specific delimiters or instructions to ignore embedded instructions are provided in the Python examples when interpolating these variables.
- Capability inventory: The skill possesses the capability to perform network operations (API calls) and trigger audio playback/text-to-speech via the Telnyx platform.
- Sanitization: There is no evidence of input validation or sanitization within the documentation snippets before passing user-controlled strings to the SDK methods.
Audit Metadata