telnyx-voice-media-ruby
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installation instructions include the
telnyxRuby gem, which is the official SDK provided by the vendor for interacting with their voice services. - [INDIRECT_PROMPT_INJECTION]: The skill processes call transcriptions provided through webhooks (the
call.recording.transcription.savedevent). This introduces a surface where malicious instructions spoken by a participant during a recorded call could be ingested into the agent's context as plain text. * Ingestion points: Webhook payload fielddata.payload.transcription_textdescribed inSKILL.md. * Boundary markers: None identified in the provided instructions or code snippets. * Capability inventory: The skill provides capabilities to control call state, includingstart_playback,speak, andstart_recordingas shown inSKILL.md. * Sanitization: No explicit sanitization or filtering of transcription text is described in the integration examples.
Audit Metadata