telnyx-voice-gather-python
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation includes instructions to install the official
telnyxlibrary viapip install telnyx, which is a standard procedure for using a service-specific SDK. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external audio and DTMF data from callers through interactive voice menus and AI assistants.
- Ingestion points: Caller speech and DTMF inputs are captured in
SKILL.mdthrough actions likegather_using_aiandstart_ai_assistant. - Boundary markers: The provided code examples do not include explicit delimiter-based isolation or instructions to the model to ignore potential prompt injection attempts within caller audio or speech transcripts.
- Capability inventory: The skill provides access to various call control actions, including adding messages to an assistant conversation, starting/stopping AI gathering, and initiating voice flows across all documented scripts.
- Sanitization: There are no documented steps for sanitizing or validating the results returned in the
CallAIGatherEndedorCallAIGatherPartialResultswebhooks before they are processed by the application logic.
Audit Metadata