telnyx-voice-java
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill enables the agent to issue telephony commands through the Telnyx API, such as dialing numbers, transferring calls, and bridging sessions. These are the core intended functions of the skill and are performed through a managed SDK.
- [EXTERNAL_DOWNLOADS]: The skill documentation includes standard installation instructions for the Telnyx Java SDK (
com.telnyx.sdk:telnyx) via Maven and Gradle. These packages originate from a recognized vendor repository. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to handle real-time call events via webhooks, which represent an entry point for external data. However, the skill explicitly provides and mandates a security pattern for signature verification using Ed25519 headers, which ensures that only authenticated payloads from the service provider are processed, significantly reducing the risk of malicious data ingestion.
- [CREDENTIALS_SAFE]: The setup instructions correctly demonstrate initializing the client from environment variables (
TelnyxOkHttpClient.fromEnv()), avoiding the risk of hardcoded API keys in application code.
Audit Metadata