telnyx-voice-curl

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses curl to perform network operations against the Telnyx API (api.telnyx.com). These commands are used to initiate and control voice calls as described in the skill's primary purpose.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources and provides parameters for the API to fetch content from remote URLs.
  • Ingestion points: Data enters the context via webhook payloads (e.g., call.answered, call.hangup in SKILL.md) and response fields from the Telnyx API. Additionally, parameters like audio_url, stream_url, and webhook_url in references/api-details.md define external content sources.
  • Boundary markers: No explicit delimiters or boundary instructions are provided to the agent to distinguish between its instructions and the data returned by these external sources.
  • Capability inventory: The skill includes capabilities to execute shell commands (curl) for network operations across multiple endpoints.
  • Sanitization: There is no mention of input sanitization, validation, or escaping for the data received from webhooks or external URLs before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 04:55 PM