telnyx-voice-media-ruby

Pass

Audited by Gen Agent Trust Hub on Oct 28, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installation instructions include the telnyx Ruby gem, which is the official SDK provided by the vendor for interacting with their voice services.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes call transcriptions provided through webhooks (the call.recording.transcription.saved event). This introduces a surface where malicious instructions spoken by a participant during a recorded call could be ingested into the agent's context as plain text. * Ingestion points: Webhook payload field data.payload.transcription_text described in SKILL.md. * Boundary markers: None identified in the provided instructions or code snippets. * Capability inventory: The skill provides capabilities to control call state, including start_playback, speak, and start_recording as shown in SKILL.md. * Sanitization: No explicit sanitization or filtering of transcription text is described in the integration examples.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 28, 2026, 06:19 PM