telnyx-voice-curl
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curlto perform network operations against the Telnyx API (api.telnyx.com). These commands are used to initiate and control voice calls as described in the skill's primary purpose. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources and provides parameters for the API to fetch content from remote URLs.
- Ingestion points: Data enters the context via webhook payloads (e.g.,
call.answered,call.hangupinSKILL.md) and response fields from the Telnyx API. Additionally, parameters likeaudio_url,stream_url, andwebhook_urlinreferences/api-details.mddefine external content sources. - Boundary markers: No explicit delimiters or boundary instructions are provided to the agent to distinguish between its instructions and the data returned by these external sources.
- Capability inventory: The skill includes capabilities to execute shell commands (
curl) for network operations across multiple endpoints. - Sanitization: There is no mention of input sanitization, validation, or escaping for the data received from webhooks or external URLs before it is processed by the agent.
Audit Metadata