telnyx-voice-media-curl
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No security issues detected. The skill provides legitimate documentation and examples for the Telnyx Voice Media API.
- [COMMAND_EXECUTION]: Uses standard
curlcommands to interact with the official Telnyx API. These operations are restricted to the vendor's domain (api.telnyx.com) and align with the skill's stated purpose. - [CREDENTIALS_UNSAFE]: The skill correctly instructs users to manage sensitive API keys via environment variables rather than hardcoding them.
- [INDIRECT_PROMPT_INJECTION]: The skill has a low-risk surface for indirect prompt injection: 1. Ingestion points:
audio_urlandpayloadfields (SKILL.md). 2. Boundary markers: Absent. 3. Capability inventory:curlnetwork operations (SKILL.md). 4. Sanitization: Absent. The risk is minimal as these are standard data fields for a communications API.
Audit Metadata