telnyx-voice-media-go
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the official Telnyx Go SDK from the vendor's GitHub repository (github.com/team-telnyx/telnyx-go).
- [SAFE]: Demonstrates secure secret management by retrieving the Telnyx API key from environment variables using os.Getenv.
- [SAFE]: Includes guidance and implementation code for Ed25519 webhook signature verification to ensure the authenticity of received events.
- [INDIRECT_PROMPT_INJECTION]: The skill handles untrusted data that could be exploited for indirect prompt injection or server-side request forgery (SSRF).
- Ingestion points: Parameters
AudioURLin theStartPlaybackmethod andPayloadin theSpeakmethod within SKILL.md. - Boundary markers: None are present in the example code provided.
- Capability inventory: Performs authenticated API calls to Telnyx infrastructure for call control, media playback, and recording.
- Sanitization: Not shown in the examples; developers should implement validation for external URLs and sanitize text inputs before processing.
Audit Metadata